Method for statically detecting malicious code in android APP (Application)

A static detection and malicious code technology, applied in the fields of instruments, electrical digital data processing, platform integrity maintenance, etc., can solve the problem of high difficulty in sample acquisition and achieve the effect of high recognition rate

Inactive Publication Date: 2015-08-12
NANJING UNIV OF POSTS & TELECOMM
View PDF1 Cites 26 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, there is also the di

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for statically detecting malicious code in android APP (Application)
  • Method for statically detecting malicious code in android APP (Application)
  • Method for statically detecting malicious code in android APP (Application)

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0032] The present invention will be described in further detail below in conjunction with the accompanying drawings and embodiments.

[0033] First define 6 intents, the APIs corresponding to these 6 intents are very common in android APP:

[0034] (1) SendSms, this intent corresponds to the API for sending short messages by SMS, including the three methods of sendTextMessage(), sendDataMessage(), and SendMultipartTextMessage() contained in the SMSManager SMS data management class. These APIs are often executed in the background.

[0035] (2) PhoneCall corresponds to a direct phone dial, that is, the action of android.intent.action.CALL is used to trigger the call to startActivity(). Malware affects automatic dialing mechanisms by dialing without the user's attention.

[0036] (3) HttpAccess, this intent describes the API for HTTP links. HTTP links are common in Android applications for different purposes. Including URL.openConnection, URL.openStream(), AbstractHttpClient...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for statically detecting a malicious code in an android APP (Application). The method comprises the following steps of preprocessing android software, and disassembling the android APP to obtain a java source code by virtue of decompiling software; performing a series of lexical and syntactic analysis on the java source code to obtain user interface text information; judging whether the APP has a malicious behavior or not according to the matching degree of the user interface text information and a calling interface in the APP. According to the method, various technical means such as lexical analysis and syntactic analysis can be adopted for scanning an APP file to generate a disassembling code of the APP under the condition of not running a code, and then the disassembling code is read to master a function of the APP, so that the malicious code in the android APP is detected.

Description

technical field [0001] The invention relates to a static detection technology of malicious codes on an android platform, and belongs to the technical field of mobile application security. Background technique [0002] With the rapid development of 3G network, more and more users start to use mobile smart terminals, and Android smart phones are rapidly occupying the smart phone market due to their open source and high cost performance. With the emergence of new features in smart phones, various new types of security issues also follow. [0003] The application market integrates software marketing, installation and update, so developers can easily put application programs in the application market, and people can also easily obtain and use corresponding application programs from the application market. The liquidity of the market has brought great challenges to security issues. Rapidly developed and deployed apps, sketchy permission systems, privacy violations, and constrain...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/56
CPCG06F21/563
Inventor 张卫丰徐驰亚
Owner NANJING UNIV OF POSTS & TELECOMM
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products