System and method for detecting dynamic malicious behaviors of application program in mobile terminal

Abstract

The invention provides a system and method for detecting dynamic malicious behaviors of an application program in a mobile terminal. The system comprises a software behavior extraction module, a dynamic stain tracking module, a dynamic behavior recognition module and a driving module, wherein the software behavior extraction module dynamically extracts software behaviors of the application program running on the mobile terminal; the dynamic stain tracking module receives the software behaviors and monitors a data transmission behavior among the software behaviors to judge whether the data transmission behavior is a malicious behavior; the dynamic behavior recognition module receives the software behaviors and recognizes a software system calling behavior among the software behaviors to judge whether the software system calling behavior is a malicious behavior; the driving module receives judgment results of the dynamic stain tracking module and the dynamic behavior recognition module and conducts processing. By means of the system and method, a dynamic detection technology for the application program in the running process is provided, the ability of the system to detect malicious software is improved, and information security of users is guaranteed.

Description

technical field [0001] The invention relates to the field of application programs, in particular to a dynamic malicious behavior detection system and method for application programs in mobile terminals. Background technique [0002] While mobile terminals bring portability and high-quality user experience, a large number of malicious software behaviors make the use of smart mobile terminals challenging. The main problems focus on the following points: [0003] Under the current development mode of smart mobile terminals, the market share of traditional mobile terminals is shrinking day by day, such as Blackberry and Symbian operating systems are gradually fading out of the public's sight, while Android, ios, Windows Phone and other systems have become mainstream products in the current market. These smart mobile terminal applications can be downloaded and installed from the relevant application market, which leads to a large number of security problems. Some of the downloade...

AI Technical Summary

Problems solved by technology

[0009] In view of the shortcomings of the prior art described above, the purpose of the present invention is to provide a dynamic malicious behavior detection system and method for applications in mobile terminals, which is used to solve the problem that existing detection methods cannot detect malicious behavior after installation. And for the malware that runs silently in the back, it cannot be detected, which will bring losses to users or loss of information and data, etc.

Images