Malicious software network behavior detection method specific to network service provider and system thereof

Abstract

The invention discloses a malicious software network behavior detection method specific to a network service provider and a system thereof. The method comprises: a user mobile terminal is connected with a backbone network of a network service provider by a base station of the network service provider and the backbone network of the network service provider is connected with an internet network; when being connected to the internet network, the user mobile terminal applies to a detection server for authentication; after authentication processing, collection is carried out by a dynamic distribution flow mirror image port and the network flow of the user mobile terminal is cached to a flow data processing server, identification and privacy protection processing is carried out on the obtained network flow of the user mobile terminal, network flow data features are extracted and aggregated to form a feature set, and the feature set is transmitted to the detection server; the feature set is read and a detection model in the detection server detects features in the feature set; and detection results are returned to the backbone network of the network service provider by the flow data processing server and then are returned to the user mobile terminal finally.

Description

technical field [0001] The invention relates to a mobile terminal malicious software detection method, in particular to a network service provider-oriented malicious software network behavior detection method and system. Background technique [0002] With the widespread use of mobile terminals, especially the rapid popularization of smart phones, mobile smart terminals have brought great changes to modern society. Since entering the 21st century, we have quickly entered the mobile era. The mobile phone is no longer limited to communication services in the traditional sense, but has become a powerful terminal integrating e-commerce, personal payment, social entertainment and other functions. However, with the popularity of mobile applications and the explosive growth of the number of users, the security of mobile smart terminals is also facing great challenges. According to a 2013 China Internet Network Security Report released by the National Internet Emergency Response Cen...

AI Technical Summary

Problems solved by technology

However, at present, network service providers seldom carry out active detection and early warning for the network behavior of mobile terminal malware, and the prevention and control of mobile terminal malware is passively starting from complaints. This method is obviously lagging behind and often has caused irreparable damage to the user

Images