A method and system for assessing security risks of mobile applications

Abstract

The present application discloses a method and system for assessing the security risk of a mobile application, which relates to the field of security risk assessment. The method and system include a data acquisition module, an access data analysis module 1, an access data analysis module 2, and a comprehensive security risk analysis and assessment module. The method acquires access data of application data of a target mobile application and conducts a comprehensive analysis in combination with the data security levels of various types of application data, thereby effectively improving the accuracy of the data security assessment of the target mobile application itself. The method effectively assesses the basic data access information of a target mobile device by analyzing the target mobile application, and conducts a comprehensive assessment in combination with the data security assessment results of the target mobile application itself, thereby effectively improving the comprehensiveness and accuracy of the security risk of the target mobile application.

Description

Technical Field

[0001] The present application relates to the field of security risk assessment, and in particular to a method and system for security risk assessment of mobile applications. Background Art

[0002] Mobile application data security assessment is of great significance in protecting user privacy, preventing cyber attacks, complying with laws and regulations, building social trust, and promoting long-term economic development. Application developers and related companies should attach importance to and conduct data security assessments regularly to improve the security and credibility of applications and provide users with safer and more reliable services.

[0003] Existing technologies lack security level assessment for various types of data when conducting data security assessment for mobile applications, and are unable to effectively assess the data security of mobile applications based on the security level assessment for various types of data and malicious access conditions, which reduces the accuracy of data security assessment for mobile applications. Furthermore, there is a lack of data access assessment for mobile applications to basic data of mobile devices, which results in a lack of important indicators for data security assessment for mobile applications, further reducing the accuracy of security risk assessment for mobile applications. Summary of the invention

[0004] The purpose of the present invention is to provide a method and system for mobile application security risk assessment to solve the problems raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solution: a security risk assessment system for mobile applications, comprising:

[0006] Data acquisition module: used to acquire the application data storage status of the mobile application and the basic data storage status of the mobile device, obtain various types of application data corresponding to the mobile application and the storage address and data security level corresponding to various types of application data, and obtain the data security level and storage address of various types of basic data corresponding to the mobile device;

[0007] Access data analysis module 1: used to obtain and analyze the data access status of various application data corresponding to the target mobile application, and obtain the application data security impact coefficient of the target mobile application;

[0008] Access data analysis module 2: used to obtain and analyze the data access status of the target mobile application to various basic data of the target mobile device, and obtain the basic data threat coefficient corresponding to the target mobile application;

[0009] Comprehensive security risk analysis and assessment module: used to conduct comprehensive analysis and assessment on the application data security impact coefficient and basic data threat coefficient of the target mobile application, and obtain the corresponding security assessment results of the target mobile application.

[0010] In a preferred embodiment of this scheme, the specific implementation method of the data acquisition module is as follows:

[0011] Establishing a data extraction relationship between the data storage acquisition module and the database, extracting various application data corresponding to the target mobile application and various basic data corresponding to the target mobile device stored in the database, extracting the storage addresses of various application data corresponding to the target mobile application stored in the database, and extracting the storage addresses of various basic data corresponding to the target mobile device stored in the database;

[0012] According to the preset data security levels corresponding to each type of application data, the various types of application data corresponding to the target mobile application are screened and matched to obtain the data security levels of the target mobile application corresponding to each type of application data; according to the preset data security levels corresponding to each type of basic data, the various types of basic data corresponding to the target mobile device are screened and matched to obtain the data security levels of the target mobile device corresponding to each type of basic data.

[0013] In a preferred embodiment of this solution, the specific implementation method of accessing the data analysis module 1 is as follows:

[0014] Establishing a data extraction relationship between the access data analysis module 1 and the database, extracting the access data set of each storage address stored in the database, and obtaining the access data set of each application data according to the storage address of each application data corresponding to the target mobile application, wherein the access data set includes the number of application data accesses within a unit time period and the access object of each application data access;

[0015] Extract the access rights of each access object corresponding to the target application data stored in the database. Different access rights correspond to application data with different data security levels. Screen and divide the access objects corresponding to each application data access and the access rights of each access object corresponding to the target application data to obtain the unauthorized access objects and authorized access objects corresponding to each application data, and calculate the proportion of unauthorized access objects corresponding to each application data to the total access objects. and the proportion of authorized access objects to the total access objects , calculate the proportion of unauthorized access times to the total access times for each type of application data and the ratio of authorized access times to total access times , Indicates the number of various application data;

[0016] By calculating the formula , calculate the data risk coefficient corresponding to each type of application data ,in It is expressed as the data security impact factor of each type of application data corresponding to the data security level, Expressed as a preset data risk coefficient influencing factor;

[0017] Extract the data risk coefficient thresholds corresponding to each data security level stored in the database, screen and obtain the data risk coefficient thresholds corresponding to each type of application data, compare and analyze the data risk coefficients corresponding to each type of application data with the data risk coefficient thresholds, screen and record various types of application data greater than the preset data risk coefficient thresholds as various types of risk data, and match and obtain the data risk coefficients corresponding to various types of risk data;

[0018] By calculating the formula , calculate the application data security impact coefficient of the target mobile application ,in It is expressed as the preset data security impact factor. Indicates the number of various types of hazardous data. , Expressed as the number of dangerous data.

[0019] In a preferred embodiment of this solution, the specific implementation method of accessing the data analysis module 2 is as follows:

[0020] Establish a data extraction relationship between the database and the access data analysis module 2, extract the access rights of the target mobile application corresponding to various basic data in the target mobile device stored in the database, extract the access logs of the target mobile application corresponding to various basic data in the target mobile device stored in the database, and screen and obtain the unauthorized basic data access logs and authorized basic data access logs corresponding to the target mobile application according to the access rights and access logs of the target mobile application corresponding to various basic data in the target mobile device;

[0021] By acquiring data from the access logs of each unauthorized basic data corresponding to the target mobile application, access data of each unauthorized basic data corresponding to the target mobile application is obtained, wherein the access data includes the number of accesses per unit time, the access time point of each access, and the time interval between adjacent access time points;

[0022] Extract the real-time network data stored in the database, filter according to the access time points corresponding to the unauthorized basic data, and obtain the network data corresponding to the access time points of the unauthorized basic data, wherein the network data includes network traffic and broadband utilization;

[0023] Filter and obtain the data security level corresponding to each unauthorized basic data;

[0024] By calculating the formula , get the network anomaly coefficient of each access time point corresponding to each unauthorized basic data ,in It is represented by the number of each unauthorized basic data. , It is represented by the number of each access time point corresponding to each unauthorized basic data. It is represented by the network traffic of each unauthorized basic data at each access time point. It is expressed as the bandwidth utilization rate of each access time point corresponding to each unauthorized basic data. It is represented by the network traffic threshold corresponding to each access time point, It is represented by the bandwidth utilization threshold corresponding to each access time point, It is expressed as the data security impact factor corresponding to the data security level of each unauthorized basic data;

[0025] By calculating the formula

[0026] , the data security impact coefficient of each unauthorized basic data corresponding to the target mobile application is calculated, where It is expressed as the number of accesses per unit time for each unauthorized basic data. It is represented as the time interval between adjacent access time points. Expressed as data security impact factor;

[0027] By calculating the formula , calculate the basic data threat coefficient corresponding to the target mobile application ,in Expressed as the preset basic data threat coefficient impact factor.

[0028] In the preferred embodiment of this scheme, the specific implementation method of the comprehensive security risk analysis and assessment module is as follows:

[0029] By calculating the formula , calculate the corresponding comprehensive safety factor of the target mobile application, where Expressed as a preset comprehensive safety factor influencing factor;

[0030] A data extraction relationship is established between the comprehensive security risk analysis and evaluation module and the database, and each security risk assessment level and the comprehensive safety factor corresponding to each security risk assessment level stored in the database are extracted. Matching and screening are performed through the comprehensive safety factor of the target mobile application to obtain the security risk assessment level corresponding to the target mobile application, and the security risk assessment level corresponding to the target mobile application is recorded as the security assessment result corresponding to the target mobile application.

[0031] To achieve the above object, the present invention also provides the following technical solution: a method for assessing the security risk of a mobile application, comprising the following steps:

[0032] Acquire the application data storage status of the mobile application and the basic data storage status of the mobile device, obtain various types of application data corresponding to the mobile application and the storage addresses and data security levels corresponding to various types of application data, and obtain the data security levels and storage addresses corresponding to various types of basic data of the mobile device;

[0033] Acquire and analyze the data access status of various application data corresponding to the target mobile application to obtain the application data security impact coefficient of the target mobile application;

[0034] Acquire and analyze the data access status of the target mobile application to various basic data of the target mobile device to obtain the basic data threat coefficient corresponding to the target mobile application;

[0035] A comprehensive analysis and evaluation is performed on the application data security impact coefficient and basic data threat coefficient of the target mobile application to obtain the corresponding security assessment results of the target mobile application.

[0036] Compared with the prior art, the present invention has the following beneficial effects:

[0037] The present invention acquires access data of application data of a target mobile application and performs a comprehensive analysis in combination with the data security levels of various types of application data, thereby effectively improving the accuracy of data security assessment of the target mobile application itself.

[0038] The present invention effectively evaluates the basic data access information of the target mobile device by analyzing the target mobile application, and performs a comprehensive evaluation based on the data security evaluation results of the target mobile application itself, thereby effectively improving the comprehensiveness and accuracy of the security risks of the target mobile application. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The present invention is further described using the accompanying drawings, but the embodiments in the accompanying drawings do not constitute any limitation to the present invention. A person skilled in the art can obtain other drawings based on the following drawings without creative work.

[0040] Figure 1 It is a flow chart of the system structure of the present invention;

[0041] Figure 2 It is a schematic diagram of the process of the present invention. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] See also Figure 1 The present invention provides a technical solution: a security risk assessment system for mobile applications includes a data acquisition module, an access data analysis module 1, an access data analysis module 2 and a comprehensive security risk analysis and assessment module:

[0044] The data acquisition module is connected with the access data analysis module 1 and the access data analysis module 2, the access data analysis module 1 is connected with the comprehensive security risk analysis and evaluation module, and the access data analysis module 2 is connected with the comprehensive security risk analysis and evaluation module.

[0045] The data acquisition module is used to acquire the application data storage status of the mobile application and the basic data storage status of the mobile device, obtain various types of application data corresponding to the mobile application and the storage address and data security level corresponding to each type of application data, and obtain the data security level and storage address of various types of basic data corresponding to the mobile device;

[0046] Furthermore, the specific execution mode of the data acquisition module is as follows:

[0047] Establishing a data extraction relationship between the data storage acquisition module and the database, extracting various application data corresponding to the target mobile application and various basic data corresponding to the target mobile device stored in the database, extracting the storage addresses of various application data corresponding to the target mobile application stored in the database, and extracting the storage addresses of various basic data corresponding to the target mobile device stored in the database;

[0048] According to the preset data security levels corresponding to each type of application data, the various types of application data corresponding to the target mobile application are screened and matched to obtain the data security levels of the target mobile application corresponding to each type of application data; according to the preset data security levels corresponding to each type of basic data, the various types of basic data corresponding to the target mobile device are screened and matched to obtain the data security levels of the target mobile device corresponding to each type of basic data.

[0049] The access data analysis module 1 is used to obtain and analyze the data access status of various application data corresponding to the target mobile application to obtain the application data security impact coefficient of the target mobile application;

[0050] Furthermore, the specific implementation method of accessing the data analysis module 1 is as follows:

[0051] Establishing a data extraction relationship between the access data analysis module 1 and the database, extracting the access data set of each storage address stored in the database, and obtaining the access data set of each application data according to the storage address of each application data corresponding to the target mobile application, wherein the access data set includes the number of application data accesses within a unit time period and the access object of each application data access;

[0052] Extract the access rights of each access object corresponding to the target application data stored in the database. Different access rights correspond to application data with different data security levels. Screen and divide the access objects corresponding to each application data access and the access rights of each access object corresponding to the target application data to obtain the unauthorized access objects and authorized access objects corresponding to each application data, and calculate the proportion of unauthorized access objects corresponding to each application data to the total access objects. and the proportion of authorized access objects to the total access objects , calculate the proportion of unauthorized access times to the total access times for each type of application data and the ratio of authorized access times to total access times , Indicates the number of various application data;

[0053] By calculating the formula , calculate the data risk coefficient corresponding to each type of application data ,in It is expressed as the data security impact factor of each type of application data corresponding to the data security level, Expressed as a preset data risk coefficient influencing factor;

[0054] Extract the data risk coefficient thresholds corresponding to each data security level stored in the database, screen and obtain the data risk coefficient thresholds corresponding to each type of application data, compare and analyze the data risk coefficients corresponding to each type of application data with the data risk coefficient thresholds, screen and record various types of application data greater than the preset data risk coefficient thresholds as various types of risk data, and match and obtain the data risk coefficients corresponding to various types of risk data;

[0055] By calculating the formula , calculate the application data security impact coefficient of the target mobile application ,in It is expressed as the preset data security impact factor. Indicates the number of various types of hazardous data. , Expressed as the number of dangerous data.

[0056] The access data analysis module 2 is used to obtain and analyze the data access status of the target mobile application to various basic data of the target mobile device, and obtain the basic data threat coefficient corresponding to the target mobile application;

[0057] Furthermore, the specific implementation method of accessing the data analysis module 2 is as follows:

[0058] Establish a data extraction relationship between the database and the access data analysis module 2, extract the access rights of the target mobile application corresponding to various basic data in the target mobile device stored in the database, extract the access logs of the target mobile application corresponding to various basic data in the target mobile device stored in the database, and screen and obtain the unauthorized basic data access logs and authorized basic data access logs corresponding to the target mobile application according to the access rights and access logs of the target mobile application corresponding to various basic data in the target mobile device;

[0059] By acquiring data from the access logs of each unauthorized basic data corresponding to the target mobile application, access data of each unauthorized basic data corresponding to the target mobile application is obtained, wherein the access data includes the number of accesses per unit time, the access time point of each access, and the time interval between adjacent access time points;

[0060] Extract the real-time network data stored in the database, filter according to the access time points corresponding to the unauthorized basic data, and obtain the network data corresponding to the access time points of the unauthorized basic data, wherein the network data includes network traffic and broadband utilization;

[0061] Filter and obtain the data security level corresponding to each unauthorized basic data;

[0062] By calculating the formula , get the network anomaly coefficient of each access time point corresponding to each unauthorized basic data ,in It is represented by the number of each unauthorized basic data. , It is represented by the number of each access time point corresponding to each unauthorized basic data. It is represented by the network traffic of each unauthorized basic data at each access time point. It is expressed as the bandwidth utilization rate of each access time point corresponding to each unauthorized basic data. It is represented by the network traffic threshold corresponding to each access time point, It is represented by the bandwidth utilization threshold corresponding to each access time point, It is expressed as the data security impact factor corresponding to the data security level of each unauthorized basic data;

[0063] By calculating the formula

[0064] , the data security impact coefficient of each unauthorized basic data corresponding to the target mobile application is calculated, where It is expressed as the number of accesses per unit time for each unauthorized basic data. It is represented as the time interval between adjacent access time points. Expressed as data security impact factor;

[0065] By calculating the formula , calculate the basic data threat coefficient corresponding to the target mobile application ,in Expressed as the preset basic data threat coefficient impact factor.

[0066] Comprehensive security risk analysis and assessment module: used to conduct comprehensive analysis and assessment on the application data security impact coefficient and basic data threat coefficient of the target mobile application, and obtain the corresponding security assessment results of the target mobile application.

[0067] Furthermore, the specific implementation of the comprehensive security risk analysis and assessment module is as follows:

[0068] By calculating the formula , calculate the corresponding comprehensive safety factor of the target mobile application, where Expressed as a preset comprehensive safety factor influencing factor;

[0069] A data extraction relationship is established between the comprehensive security risk analysis and evaluation module and the database, and each security risk assessment level and the comprehensive safety factor corresponding to each security risk assessment level stored in the database are extracted. Matching and screening are performed through the comprehensive safety factor of the target mobile application to obtain the security risk assessment level corresponding to the target mobile application, and the security risk assessment level corresponding to the target mobile application is recorded as the security assessment result corresponding to the target mobile application.

[0070] See also Figure 2 To achieve the above purpose, the present invention also provides the following technical solution: a method for assessing the security risk of a mobile application, comprising the following steps:

[0071] Acquire the application data storage status of the mobile application and the basic data storage status of the mobile device, obtain various types of application data corresponding to the mobile application and the storage addresses and data security levels corresponding to various types of application data, and obtain the data security levels and storage addresses corresponding to various types of basic data of the mobile device;

[0072] Acquire and analyze the data access status of various application data corresponding to the target mobile application to obtain the application data security impact coefficient of the target mobile application;

[0073] Acquire and analyze the data access status of the target mobile application to various basic data of the target mobile device to obtain the basic data threat coefficient corresponding to the target mobile application;

[0074] A comprehensive analysis and evaluation is performed on the application data security impact coefficient and basic data threat coefficient of the target mobile application to obtain the corresponding security assessment results of the target mobile application.

[0075] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A mobile application security risk assessment system, characterized in that: include: Data acquisition module: used to acquire the application data storage status of the mobile application and the basic data storage status of the mobile device, obtain various types of application data corresponding to the mobile application and the storage address and data security level corresponding to various types of application data, and obtain the data security level and storage address of various types of basic data corresponding to the mobile device; The specific implementation of the data acquisition module is as follows: Establishing a data extraction relationship between the data storage acquisition module and the database, extracting various application data corresponding to the target mobile application and various basic data corresponding to the target mobile device stored in the database, extracting the storage addresses of various application data corresponding to the target mobile application stored in the database, and extracting the storage addresses of various basic data corresponding to the target mobile device stored in the database; According to the preset data security levels corresponding to the various types of application data, the various types of application data corresponding to the target mobile application are screened and matched to obtain the data security levels of the various types of application data corresponding to the target mobile application; according to the preset data security levels corresponding to the various types of basic data, the various types of basic data corresponding to the target mobile device are screened and matched to obtain the data security levels of the various types of basic data corresponding to the target mobile device; Access data analysis module 1: used to obtain and analyze the data access status of various application data corresponding to the target mobile application, and obtain the application data security impact coefficient of the target mobile application; The specific implementation method of accessing data analysis module 1 is as follows: Establishing a data extraction relationship between the access data analysis module 1 and the database, extracting the access data set of each storage address stored in the database, and obtaining the access data set of each application data according to the storage address of each application data corresponding to the target mobile application, wherein the access data set includes the number of application data accesses within a unit time period and the access object of each application data access; Extract the access rights of each access object corresponding to the target application data stored in the database. Different access rights correspond to application data with different data security levels. Screen and divide the access objects corresponding to each application data access and the access rights of each access object corresponding to the target application data to obtain the unauthorized access objects and authorized access objects corresponding to each application data, and calculate the proportion of unauthorized access objects corresponding to each application data to the total access objects. and the proportion of authorized access objects to the total access objects , calculate the proportion of unauthorized access times to the total access times for each type of application data and the ratio of authorized access times to total access times , Indicates the number of various application data; By calculating the formula , calculate the data risk coefficient corresponding to each type of application data ,in It is expressed as the data security impact factor of each type of application data corresponding to the data security level, Expressed as a preset data risk coefficient influencing factor; Extract the data risk coefficient thresholds corresponding to each data security level stored in the database, screen and obtain the data risk coefficient thresholds corresponding to each type of application data, compare and analyze the data risk coefficients corresponding to each type of application data with the data risk coefficient thresholds, screen and record various types of application data greater than the preset data risk coefficient thresholds as various types of risk data, and match and obtain the data risk coefficients corresponding to various types of risk data; By calculating the formula , calculate the application data security impact coefficient of the target mobile application ,in It is expressed as the preset data security impact factor. Indicates the number of various types of hazardous data. , Expressed as the number of hazardous data; Access data analysis module 2: used to obtain and analyze the data access status of the target mobile application to various basic data of the target mobile device, and obtain the basic data threat coefficient corresponding to the target mobile application; The specific implementation method of accessing data analysis module 2 is as follows: Establish a data extraction relationship between the database and the access data analysis module 2, extract the access rights of the target mobile application corresponding to various basic data in the target mobile device stored in the database, extract the access logs of the target mobile application corresponding to various basic data in the target mobile device stored in the database, and screen and obtain the unauthorized basic data access logs and authorized basic data access logs corresponding to the target mobile application according to the access rights and access logs of the target mobile application corresponding to various basic data in the target mobile device; By acquiring data from the access logs of each unauthorized basic data corresponding to the target mobile application, access data of each unauthorized basic data corresponding to the target mobile application is obtained, wherein the access data includes the number of accesses per unit time, the access time point of each access, and the time interval between adjacent access time points; Extract the real-time network data stored in the database, filter according to the access time points corresponding to the unauthorized basic data, and obtain the network data corresponding to the access time points of the unauthorized basic data, wherein the network data includes network traffic and broadband utilization; Filter and obtain the data security level corresponding to each unauthorized basic data; By calculating the formula , get the network anomaly coefficient of each access time point corresponding to each unauthorized basic data ,in It is represented by the number of each unauthorized basic data. , It is represented by the number of each access time point corresponding to each unauthorized basic data. It is represented by the network traffic of each unauthorized basic data at each access time point. It is expressed as the bandwidth utilization rate of each unauthorized basic data at each access time point. It is represented by the network traffic threshold corresponding to each access time point, It is represented by the bandwidth utilization threshold corresponding to each access time point, It is expressed as the data security impact factor corresponding to the data security level of each unauthorized basic data; By calculating the formula , the data security impact coefficient of each unauthorized basic data corresponding to the target mobile application is calculated, where It is expressed as the number of accesses per unit time for each unauthorized basic data. It is represented as the time interval between adjacent access time points. Expressed as data security impact factor; By calculating the formula , calculate the basic data threat coefficient corresponding to the target mobile application ,in It is expressed as the preset basic data threat coefficient impact factor; Comprehensive security risk analysis and assessment module: used to conduct comprehensive analysis and assessment on the application data security impact coefficient and basic data threat coefficient of the target mobile application, and obtain the corresponding security assessment results of the target mobile application; The specific implementation of the comprehensive security risk analysis and assessment module is as follows: By calculating the formula , calculate the corresponding comprehensive safety factor of the target mobile application, where Expressed as a preset comprehensive safety factor influencing factor; A data extraction relationship is established between the comprehensive security risk analysis and evaluation module and the database, and each security risk assessment level and the comprehensive safety factor corresponding to each security risk assessment level stored in the database are extracted. Matching and screening are performed through the comprehensive safety factor of the target mobile application to obtain the security risk assessment level corresponding to the target mobile application, and the security risk assessment level corresponding to the target mobile application is recorded as the security assessment result corresponding to the target mobile application.

2. A method for assessing the security risk of a mobile application, applied to the security risk assessment system for a mobile application according to claim 1, characterized in that: include: Acquire the application data storage status of the mobile application and the basic data storage status of the mobile device, obtain various types of application data corresponding to the mobile application and the storage addresses and data security levels corresponding to various types of application data, and obtain the data security levels and storage addresses corresponding to various types of basic data of the mobile device; Acquire and analyze the data access status of various application data corresponding to the target mobile application to obtain the application data security impact coefficient of the target mobile application; Acquire and analyze the data access status of the target mobile application to various basic data of the target mobile device to obtain the basic data threat coefficient corresponding to the target mobile application; A comprehensive analysis and evaluation is performed on the application data security impact coefficient and basic data threat coefficient of the target mobile application to obtain the corresponding security assessment results of the target mobile application.

Images