A permission combination-based Android malware detection method
A malicious software and detection method technology, applied in computer security devices, instruments, calculations, etc., can solve the problem of high false alarm rate and achieve the effect of reducing false alarm rate and improving detection rate
Active Publication Date: 2018-09-28
博雅网信(北京)科技有限公司 +1
View PDF6 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0012] In the detection results of Gazing University’s APK Auditor tool, as shown in Table 1, in the detection of malware, 2300 malware were successfully detected from 2485 malware, and the detection rate was 92.56%, but in 144 normal software Among them, 123 were falsely reported as malware, and the false positive rate was 85.42%. Although some of them may be potential or previously missed malware, the false positive rate is still too high
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0037] An embodiment of the present invention will be further described below in conjunction with the drawings.
[0038] In the embodiment of the present invention, such as figure 1 As shown, the Android malware detection method based on the permission combination first classifies the permissions. The same permission may belong to multiple categories, which can be divided into receiving information categories (the permission to receive instructions from a remote, read SMS, read MMS, Access to the network, etc.), sending information (the permission to send information to the remote, send SMS, send MMS, access the network, etc.), operation (the permission to operate locally, read SMS, send SMS, restart the device, record , Access to the camera, etc.), other categories (low sensitive permissions, such as: set always exit, set screen orientation, set animation zoom, etc.). Score the combinations of operation type, operation type-sending information type, receiving information type-o...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to an authority combination-based Android malicious software detection method, and belongs to the technical field of network security of mobile internet. The method is capable of improving the existing authority-based detection method on the basis of authority combination, so as to greatly reduce the false alarm rate of normal software in the prior art and improve the detection rate of malicious software to a certain degree. Moreover, the invention discloses a novel authority scoring and software scoring manner, and the manner can be applied to the scenes which need to rapidly and effectively carry out overall evaluation on mass software, such as preliminary screening of malicious software, rapid detection of mass malicious software and security state evaluation of application market.
Description
Technical field [0001] The invention belongs to the technical field of mobile Internet network security, and specifically relates to an Android malware detection method based on a permission combination. Background technique [0002] With the popularization of mobile communication technology and the decrease in the price of electronic products, more and more people are beginning to use mobile smart devices; according to the "Mobile Smart Terminals" issued by the China Institute of Electronic Information Industry Development (CCID Think Tank of the Ministry of Industry and Information Technology) Industry Development White Paper (2015 Edition)", in 2014, the number of global smart actual users reached 1.75 billion, and 80% of smart phones were equipped with Android; however, the review mechanism of the Android application market was too loose, and third-party software was allowed to be installed directly without going through the market , So the security is greatly reduced; especi...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/56
CPCG06F21/562G06F2221/033
Inventor 高健博陈钟李青山关志陈果陈伟腾秦煜李洪生轩志朋王晓青
Owner 博雅网信(北京)科技有限公司