Mobile application security evaluation method based on comment data

Abstract

The invention discloses a mobile application security evaluation method based on comment data. According to the mobile application security evaluation method, multiple text representation models are fused; multi-dimensional features are extracted from comment data to construct a unified vector representation form; a machine learning algorithm is used to construct a security evaluation model of a mobile application, and the evaluation model is used to provide a security risk value for a to-be-detected application; and meanwhile, explanation and explanation are provided for the user according tothe security evaluation result. The mobile application security evaluation method overcomes the problems that in a traditional application program security evaluation method, program codes are difficult to obtain and analyze, and evaluation results are difficult to understand by users. According to the mobile application security evaluation method, a mobile application security evaluation model based on comment data is constructed, and explanation of an evaluation result is provided for a user, so that the efficiency of security evaluation work is effectively improved, and meanwhile, the difficulty of the evaluation work is also reduced.

Description

technical field [0001] The invention belongs to the technical field of mobile application security assessment, in particular to a mobile application security assessment method based on comment data. Background technique [0002] With the development of the mobile Internet, mobile applications (Apps) develop rapidly, and users' concerns about the security issues of mobile applications also follow. In traditional mobile application security analysis, through dynamic detection of mobile applications and static code analysis techniques, bad behaviors hidden in the program code can be discovered. The premise of these analysis techniques is to obtain the program code in advance, decompile and other means The code structure of the application is parsed, and the security detection of the mobile application is carried out from the code level. However, it is difficult for users to obtain the source code of mobile applications, and it is also difficult to reverse crack some applicatio...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies of the above-mentioned prior art, the purpose of the present invention is to provide a mobile application security evaluation method based on comment data, so as to overcome the difficulties in obtaining and analyzing program codes and difficult evaluation results for users in traditional application program security evaluation methods. The problem of understanding; the present invention can integrate multiple text representation models, express unstructured comments into a unified vector form, use machine learning algorithms to build a security assessment model for mobile applications, and provide security risk values ​​for mobile applications to be tested , while providing users with an explanation of the evaluation results and a visual radar chart display

Images