Abnormal behavior detection system of Android platform software

A technology for software anomalies and detection systems, applied in platform integrity maintenance, instruments, electrical digital data processing, etc., can solve problems such as worry, user privacy leakage, and exhaustion of mobile terminal power resources, and achieve the effect of improving efficiency

Active Publication Date: 2016-09-21
WUHAN HONGXU INFORMATION TECH
View PDF9 Cites 24 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, the dynamic monitoring process needs to continuously run a monitoring program on the mobile terminal, which will cause the rapid depletion of mobile terminal pow

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Abnormal behavior detection system of Android platform software
  • Abnormal behavior detection system of Android platform software

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0045] Below in conjunction with accompanying drawing and embodiment describe in detail:

[0046] 1. Overall

[0047] Such as figure 1 , the system includes an interconnected Android mobile terminal 100 and a software behavior monitoring database 200;

[0048] Android mobile terminal 100 comprises kernel Hook module 110, data analysis module 120 and Hook log module 130;

[0049] Kernel Hook module 110 comprises System_server process 111, libbind.so storehouse 112 and ioctl function 113 that interact successively, realizes the extraction of kernel hook information;

[0050] Data analysis module 120 comprises resource monitoring process 121, status monitoring process 122, data analysis engine 123 and data processing process 124; Resource monitoring process 121 and status monitoring process 122 interact with data analysis engine 123 respectively, data analysis engine 123 and data processing process 124 interaction, write the definition of abnormal software behavior;

[0051] ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an abnormal behavior detection system of Android platform software, and belongs to the technical field of the intelligent mobile terminal. The system comprises an Android mobile terminal and a software behavior monitoring database, wherein the Android mobile terminal and the software behavior monitoring database are mutually communicated; the Android mobile terminal comprises a kernel Hook module, a data analysis module and a Hook log module; the kernel Hook module comprises a System_server process, a libbind.so library and an ioctl function, wherein the System_server process, the libbind.so library and the ioctl function are successively interacted to realize the extraction of kernel Hook information; the data analysis module comprises a resource monitoring process, a state monitoring process, a data analysis engine and a data processing process, and carries out the definition writing of software behavior abnormality. The abnormal behavior detection system has the advantages of advancement, accuracy and comprehensiveness, combines the advantages of dynamic detection and static detection, effectively detects the abnormal behavior of app software through the Hook of a sensitive API (Application Program Interface) function, and effectively carries out statistics on the operating system behavior characteristics of the software.

Description

technical field [0001] The invention belongs to the technical field of intelligent mobile terminals, and in particular relates to an Android platform software abnormal behavior detection system. Background technique [0002] In recent years, with the rapid development of the mobile Internet and the decline in the production cost of smartphones, many PC [0003] Functions are also gradually migrating to mobile phones, and smart phones have become more powerful, such as mobile office, electronic payment, car navigation, etc. The number of smart mobile terminal software has far exceeded the number of application software on traditional PCs. Compared with PCs, smart terminals are closer to users and gradually become an indispensable part of people's work and life. Android and iOS occupy an important share of mobile smart terminal operating systems. [0004] Compared with the application software on iOS, the number of Android application software and the number of users have ta...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/56
CPCG06F21/566G06F2221/033
Inventor 保永武陆浩葛振希
Owner WUHAN HONGXU INFORMATION TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products