Malicious application detection method, device and computer-readable storage medium

Abstract

The present invention provides a malicious application detection method, device and computer storage medium. The malicious application detection method obtains the application authority information in known malicious applications, and obtains the authority between the application authority information according to preset rules. Relevance, and establish a permission signature database according to the permission correlation; when receiving an application detection instruction, obtain the permission request information of the target application; judge whether the target application is malicious according to the permission signature database and permission request information application. The present invention establishes frequent permission sets for malicious applications. And the application program is detected through the frequent permission set, so that the malicious program can be more accurately identified, the false positive rate of the normal software in the prior art is reduced, the detection rate of the malicious software is improved, and the problem of the traditional malicious application program is solved. The technical problem of low precision of the detection method.

Description

technical field [0001] The present invention relates to the technical field of mobile Internet, in particular to a detection method, device and computer-readable storage medium for malicious applications. Background technique [0002] The Android system is a completely open operating system, so it is easy to become an active site for many malicious application developers. Malicious application developers add malicious code to popular domestic and foreign applications and publish them on major forums and application stores. Since there is usually a large amount of user privacy information in smartphones, malicious applications in the Android system usually obtain private information on the user's mobile phone without explicitly prompting the user or without the user's permission, violating the legitimate rights and interests of the user. For example, the main malicious behaviors of malicious applications include: malicious fee deduction, privacy theft, remote control, malici...

AI Technical Summary

Problems solved by technology

[0003] The main purpose of the present invention is to propose a malicious application detection method, device and computer-readable storage medium, aiming to solve the technical problem of low accuracy of traditional malicious application detection methods

Images