Aggregated event profile for detecting malicious mobile applications
By configuring on the hardware processor of the computer system, selecting multiple events caused by the target software application and building an aggregated event sequence, the problem of rapid detection and response of malware on the mobile computing platform is solved, and the rapid detection and response of malware on the mobile computing platform is achieved.
CN119768791APending Publication Date: 2025-04-04BITDEFENDER IPR MANAGEMENT
0 Cites 0 Cited by
Patent Information
- Application Number
- CN202380061136.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Priority Date
- 2022-08-23
- Filing Date
- 2023-08-21
- Publication Date
- 2025-04-04
AI Technical Summary
Technical Problem
It is difficult to respond quickly and efficiently to emerging malware threats on mobile computing platforms, especially when malware can masquerade as legitimate applications and launch attacks on small numbers of devices.
Method used
By configuring on the hardware processor of the computer system, multiple events caused by the target software application are selected, an aggregated event sequence is constructed from the event pool, and based on the sequence is determined whether the target application is malicious.
Benefits of technology
It realizes rapid detection and response to malware on mobile computing platforms, and can provide effective security protection when conventional methods are difficult to protect users and devices.
✦ Generated by Eureka AI based on patent content.
Abstract
The described systems and methods protect client devices (e.g., personal computers and IoT devices) from malware. In some embodiments, multiple client devices report the occurrence of various events to a secure server, each such event being caused by a local instance of a target application (e.g., a mobile application) executing on a respective device. The security server then organizes behavior of the respective target application across the plurality of client devices. Some embodiments compute a set and / or sequence of aggregated events that combine events detected on one device with events detected on other devices, and determine whether the target application is malicious from the set / sequence of aggregated events.
Need to check novelty before this filing date? Find Prior Art