Automatic Android platform malicious software detecting method

Abstract

The invention provides an automatic Android platform malicious software detecting method and system. The method includes the steps of 101, inputting software to be tested, analyzing the software characteristic behaviors of the software to be tested, and obtaining the malicious software characteristic behaviors in the software characteristic behaviors; 102, calculating the sum of weighted values of all the obtained software characteristic behaviors; 103, comparing the sum of the weighted values with a set threshold value, and then judging whether the software to be tested is malicious software or not. Before the step 101, the method further includes the steps of firstly, analyzing the malicious behavior mode of the software, extracting all malicious software characteristic behaviors, and establishing a malicious software characteristic behavior bank; secondly, distributing weights for all the extracted malicious software characteristic behaviors, and establishing the mapping relation list of all the malicious software characteristic behaviors and the weights; finally, calculating the detecting threshold value representing that the software belongs to the malicious software according to the weights of the malicious characteristic behaviors, and establishing a malicious software detecting model bank according to the obtained detecting threshold value.

Description

technical field [0001] The invention relates to the field of automated testing, in particular to a method for automatically detecting malicious software on an Android platform. Background technique [0002] With the popularity of the Android system, various Android applications emerge in an endless stream, and a large number of malicious software targeting the Android platform also appear. These malicious software present a continuous increasing trend, and the Android system is facing serious security threats. [0003] Jesse Burns elaborated on the security issues of mobile phone applications on the Android platform in 2009, but did not propose a relevant security detection method for malware. In 2009, Wang Zhiguo and others proposed and realized the real-time file monitoring technology of the Android smartphone system, but due to the lack of actual attack research on real Android platform malware, it is impossible to achieve good results for Android application detection. ...

AI Technical Summary

Problems solved by technology

[0004] It can be seen that the existing Android platform security research basically focuses on the security protection of the Android application system architecture, the static feature extraction of malware, and the general anomaly detection based on behavior patterns, and does not conduct in-depth research on the behavior pattern characteristics of malware and analysis, so as to carry out research on malware detection methods from the perspective of malware characteristic behavior patterns and attack intentions

Images