An information processing method, terminal and server

Abstract

The invention discloses an information processing method, a terminal and a server. The method comprises: a plurality of applications are operated according to a first preset rule; when the plurality of applications are detected to be in an operation state, a monitoring plug-in unit generated based on a first security framework is loaded; the monitoring plug-in unit is controlled to scan behavior information of the plurality of applications in the operation state to obtain dynamic scanning results; and according to a second preset rule, the dynamic scanning results are analyzed to obtain software security vulnerability information of the applications, and then the software security vulnerability information of the applications is reported to a server.

Description

technical field [0001] The present invention relates to communication technology, in particular to an information processing method, a terminal and a server. Background technique [0002] In the process of implementing the technical solutions of the embodiments of the present application, the present application at least found the following technical problems in the related art: [0003] With the popularity of smart terminals, installing a large number of applications (APPs) on the smart terminals in order to provide users with corresponding services through the functions provided by these APPs has become a normal state in work and life. The APP needs to be updated. On the one hand, it is to improve the existing functions or add new functions. On the other hand, it is to patch the software vulnerabilities in the APP. If the software vulnerabilities cannot be repaired, it is easy to be controlled by the remote control tool. , Trojan horse tools, virus tools, etc., taking mob...

AI Technical Summary

Problems solved by technology

The APP needs to be updated. On the one hand, it is to improve the existing functions or add new functions. On the other hand, it is to patch the software vulnerabilities in the APP. If the software vulnerabilities cannot be repaired, it is easy to be controlled by the remote control tool. , Trojan horse tools, virus tools, etc., taking mobile phones as an example, with the widespread use of online payment for various services in the O2O mode through smartphones, if there are software vulnerabilities that may not be fixed, it is easy to be remotely controlled by tools, Trojan horse tools, virus tools, etc. attack, thereby causing the user's property loss, that is to say, if the software vulnerabilities in the APP cannot be scanned and repaired in time, there will be a great security risk

[0004] However, in the prior art, a static method is mostly used for scanning software vulnerabilities in APP, and the operation of APP is a dynamic process. Therefore, many software vulnerabilities cannot be scanned in time by adopting this static method. Even if there is a dynamic method, it is still difficult The special security administrator in the background manually checks and simulates running the APP to achieve the purpose of scanning in a dynamic manner. Since there are still differences between the simulated running APP and the APP in the real environment, the scanning results are not accurate, and due to the full manual The operation will consume a lot of labor and time costs

Images