Mobile terminal malware detection method and device

Abstract

The invention provides a method and an apparatus for perceiving malicious software in a mobile terminal. The method comprises the steps of obtaining multi-dimensional total data of mobile terminal users and data of users affected by known malicious software every a preset time, and establishing a classifier used for identifying suspected affected users and normal users according to the data; and if triggering operation on the classifier is detected, obtaining features of the mobile terminal users currently collected by a mobile communication operator, inputting the features to the classifier, and extracting the suspected affected users in the mobile terminal users currently collected by the mobile communication operator. According to the method and the apparatus, the problems of relatively long perceptive cycle, relatively high dependency and relatively high limitation of the malicious software in the mobile terminal in the prior art are solved; the occurrence of the malicious software problem of the mobile terminal can be quickly perceived; various data resources inside and outside the mobile communication operator can be fully utilized; and the discovery precision and identification range of the suspected affected users of the malicious software can be improved.

Description

technical field [0001] The invention relates to the technical fields of mobile communication and information security, in particular to a method and device for detecting malicious software in a mobile terminal. Background technique [0002] Malware is used to collectively refer to any variety of malicious programs including viruses, worms, Trojan horses, and spyware. In recent years, with the rapid development of broadband networks and mobile communications, mobile terminals and their applications have become more common and play an important role in various fields of daily life. More and more criminals invade users' mobile terminals through malicious software to achieve profit and steal information. Therefore, malware is often attributed to the source of multiple threats and is one of the more serious threats today. [0003] At present, the existing mobile communication operators’ monitoring of mobile terminal malware is mainly based on software sample detection. The prem...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the above-mentioned technical problems, the present invention provides a mobile terminal malware perception method and device, which solves the problems in the prior art that the mobile terminal malware perception cycle is long, has high dependence and high limitations, and can Quickly perceive the occurrence of malware problems on mobile terminals, make full use of various internal and external data resources of mobile communication operators, and improve the detection accuracy and identification range of users suspected of being victimized by malware

Images