Mobile application abnormal behavior detection method and device
A mobile application and abnormal program technology, applied in the field of information security, can solve the problems of limited security research results, effective detection of application behavior, and limited applicability of detection methods, so as to achieve the effect of improving security
Active Publication Date: 2018-12-14
BEIHANG UNIV
View PDF5 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
However, the above two methods need to modify the development framework (such as PhoneGap) used by HTML5 applications, or require the assistance of application developers (such as providing whitelists, specifying permissions for corresponding domain names, etc.), which greatly limit the detection Applicability of the method
Since HTML5 technology has just emerged on the mobile side, the research results on its security are limited, and the existing methods have not effectively detected the essence of application behavior. Therefore, the detection method and security of HTML5 application behavior under the Android platform Research is particularly important
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0025]Embodiments of the present invention are described in detail below, examples of which are shown in the drawings, wherein the same or similar reference numerals designate the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by referring to the figures are exemplary and are intended to explain the present invention and should not be construed as limiting the present invention.
[0026] The method and device for detecting abnormal behavior of mobile application programs according to the embodiments of the present invention will be described below with reference to the accompanying drawings.
[0027] figure 1 is a flow chart of a method for detecting abnormal behavior of a mobile application program according to an embodiment of the present invention. Such as figure 1 As shown, the mobile application abnormal behavior detection method may include:
[0028] S101. Run a mobile application, where the mobile...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a method and a device for detecting abnormal behaviors of a mobile application program. The method comprises the following steps: running the mobile application program; extracting function calling stack information and behavior event information relevant to the mobile application program; writing the function calling stack information and the behavior event information into a behavior log; creating a behavior model to be tested for the mobile application program according to the behavior log; performing abnormal behavior detection on the behavior model to be tested according to a pre-stored behavior model library in order to judge whether the mobile application program performs any abnormal behavior or not. By adopting the method, whether the mobile application program performs any abnormal behavior or not can be detected effectively and accurately, and the security of the mobile application program is enhanced.
Description
technical field [0001] The present invention relates to the technical field of information security, in particular to a method and device for detecting abnormal behaviors of mobile application programs. Background technique [0002] Due to its free, open source and other characteristics, the Android (Android) system quickly occupied market share after development and became the fastest growing mobile smart operating system. Its open source characteristics also make the Android platform the main target of malicious applications. In the Android system, an application program will ask the user for a permission during the installation process, and the user can choose to accept or reject it. If the user accepts, the program completes the installation and enjoys the requested permissions throughout its life cycle; if the user refuses, the installation fails. With the rapid development of mobile devices, more private data and important personal information of users are often store...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): G06F11/36
CPCG06F11/3668
Inventor 毛剑崔键王瑞珑陈岳王培人刘建伟伍前红
Owner BEIHANG UNIV