A Malicious Mobile Application Detection Method for Network Encrypted Traffic

Abstract

The invention relates to a mobile malware detection method oriented on network encryption flow. By means of the mobile malware detection method oriented on the network encryption flow, whether the encryption flow generated by a mobile application is attack flow or not can be effectively analyzed; but, the existing method is mainly for plaintext flow to analyze; therefore, the detection method disclosed by the invention is an effective supplement of the existing research method; mobile malware detection of a network layer is relatively practical; simultaneously, according to the detection method disclosed by the invention, only the network flow is used as the input; an additional program does not need to be installed on a mobile terminal; a network flow content also does not need to be deeply analyzed; therefore, the operating load of the mobile terminal is lightened; furthermore, the data privacy of mobile users is ensured; and thus, the mobile malware detection method oriented on thenetwork encryption flow is convenient for practical deployment and use.

Description

technical field [0001] The invention relates to a method for detecting malicious mobile applications oriented to network encrypted traffic, and belongs to the technical fields of network security and malicious mobile application detection. Background technique [0002] With the rapid development of the mobile Internet, mobile smart terminals (such as smart phones, tablet Pads, smart watches, etc.) have become important auxiliary tools for daily social activities. However, the widespread use of mobile smart terminals has also attracted the attention of many attackers. Various malicious mobile application (Mobile malware) attacks emerge in an endless stream, and the security of mobile smart terminals is facing a severe test. [0003] Analysis of malicious mobile application attack behavior found that typical malicious attacks such as sensitive information leakage and network penetration are mostly carried out through the network, and less than 1% of them use SMS text messages....

AI Technical Summary

Problems solved by technology

[0003] Analysis of malicious mobile application attack behavior found that typical malicious attacks such as sensitive information leakage and network penetration are mostly carried out through the network, and less than 1% of them rely on SMS text messages

This kind of research work can only judge whether the mobile application is abnormal from the overall network, but cannot distinguish the specific attack traffic generated by the malicious mobile application, that is, it is impossible to determine whether an encrypted network flow generated by the mobile application is malicious attack traffic

Images