Automatic safety detection method for mobile application

Abstract

The invention discloses an automatic safety detection method for mobile applications. The method comprises the following steps: S1, selecting an APP sample needing to be detected; s2, performing static analysis on the APP program file; s3, analyzing related data integration conditions in the APP program, and checking whether the related data integration conditions accord with vulnerability conditions or not with a public CVE vulnerability library; s4, the APP program is installed on the mobile phone; s5, running the APP program on the mobile phone, and monitoring sensitive behavior sources and communication data in the mobile phone so as to discover whether the APP program has sensitive behaviors and whether the communication data is safe; s6, illegal operation is conducted on the APP program, and whether the APP program has the corresponding defense capacity or not is judged. According to the method, great convenience can be provided for developers, certain manpower, material resource cost and time cost can be saved for the developers, and great economic benefits are brought to the developers.

Description

technical field [0001] The invention relates to the fields of information security technology and mobile security application technology, in particular to a method for automatic security detection of mobile applications. Background technique [0002] In recent years, with the rapid development of the mobile Internet and the decline in the production cost of smart mobile terminals, smart phones, as a high-end mobile device closely related to our daily life, have become more and more popular in people's study, work and life. Some The office systems of large and medium-sized enterprises are also gradually shifting from PC to mobile. At the same time, with the advent of the 3G and 4G era, the good experience of the vast user groups of mobile terminals is attracting more and more developers and users to participate in the development and use of mobile applications, but some free and open source platforms The feature not only gives developers a wider development space, but also a...

AI Technical Summary

Problems solved by technology

[0004] The rapid and expansive development of mobile applications and the irregularity of the mobile application market have resulted in unprecedented risks to the security of mobile applications

The continuous emergence of mobile phone malware not only threatens the personal information security of users, but also brings major security risks to national information security, and even causes huge losses to individuals or the country.

Images