App domain name verification method and system

Abstract

The invention discloses an APP domain name verification method, including S1, obtaining the original data flow packets generated by all operations of the APP to be tested; S2, filtering the original data flow packets with a public API knowledge base, removing public URLs, and obtaining the remaining data flow package; S3. Comprehensively calculate the remaining data traffic packets, including but not limited to "URL request times", "URL corresponding data traffic packet size", "correspondence between URL and operation events", and perform quantification processing respectively, and normalize Then perform weighted average to obtain the comprehensive score corresponding to the first-level domain name; S4, determine the actual domain name of the APP to be tested, and sort from large to small according to the comprehensive score corresponding to the first-level domain name; Starting from one end, set at least one first-level domain name as the domain name of the APP; S5, check whether the actual domain name of the APP has been filed; thus the present invention can determine and verify the actual domain name of the APP. The invention also discloses an APP domain name verification system.

Description

technical field [0001] The invention relates to the field of domain name detection, in particular to an APP domain name verification method and system. Background technique [0002] With the development of science and technology, smart phones have become an indispensable tool in modern society. There are a large number of APPs on every mobile phone. It is all kinds of APPs that provide users with various conveniences in their work and life. There are also many problems, such as: Android programs maliciously deduct fees or consume traffic packages, steal user privacy data, and download software online without prompting, etc. [0003] In order to effectively supervise Internet operators, prevent illegal website business activities on the Internet, and combat the dissemination of bad Internet information, government departments have introduced management methods for domain name filing. It can be understood that APPs that have registered domain names are all legitimate Trustwor...

AI Technical Summary

Problems solved by technology

[0007] One is the need to collect training data in advance, which is time-consuming and labor-intensive;

[0008] The second is that DGA types that are not in the training set will not be detected, that is, the detection results are very inaccurate

[0009] This type of method cannot be applied to the verification of APP domain names

[0010] In order to ensure the safety of users using APP, the present invention proposes an APP domain name verification method and system to obtain the relevant domain name actually used by the APP, and further verify whether the domain name has been filed. If it has not been filed, then the APP is Untrustworthy, the network services provided are potentially risky

Images