A security risk assessment method and system for mobile applications

Abstract

The invention discloses a security risk assessment method and system for mobile application. The method comprises the following steps: establishing mapping relation among an assessment standard term, a security risk term and a tool scanning term corresponding to the mobile application; submitting the mobile application to be assessed, carrying out risk assessment on the mobile application, and writing an assessment result that a risk exists into a preset data table; and generating an application security risk assessment report. By implementing the invention, the following beneficial effects are realized: the security assessment standard term, the security risk term and the tool scanning term of the mobile application are unified, and dependence of mobile application security risk assessment on an assessor and an assessment tool is avoided; full-automatic flow processing on the mobile application security risk assessment is realized, assessment efficiency is greatly improved, assessment period is shortened, and assessment cost is reduced; and automatic management on generation of the mobile application security risk assessment report is realized, the format of the report is unified, report generation time is shortened, and report generation complexity is reduced.

Description

technical field [0001] The present invention relates to the technical field of mobile applications, in particular to a security risk assessment method and system for mobile applications. Background technique [0002] With the rapid development of the Internet, the rapid popularization of smart terminals, the rapid growth of various mobile applications, mobile applications have penetrated into people's lives and work. However, the security awareness of mobile application developers and the security protection methods of mobile applications have not completely kept up with the pace of application development. As of the end of the third quarter of 2014, a total of 1.513 million new malicious samples of mobile applications have been added in China, with an average daily growth rate of more than 7,300 copies. The cumulative number of infected people has exceeded 213 million, an increase of 417.3% from the previous quarter. The daily average of more than 1.4 million people has bee...

AI Technical Summary

Problems solved by technology

[0015] In view of this, the purpose of the present invention is to provide a security risk assessment method and system for mobile applications, aiming to solve the problem of relying on the personal experience and subjective judgment of evaluators and security experts in the prior art, relying on direct scanning results of related tools, Lack of effective evaluation process and evaluation implementation mechanism, as well as technical problems such as long evaluation period, heavy workload and high evaluation cost

Images