09-09-2015 дата публикации
Номер: CN104899514A
Принадлежит:
The invention provides a guiding symbol based mobile terminal malicious behavior detection method and system. The system comprises an application program pre-processing module, an application program dependency graph establishing module, a sensitive information marking module, a sensitive information spreading module, a guide information extraction module, a symbolic execution module and a detection module. According to the method, sensitive information of application program behaviors is compared with similar nodes in a malicious node binary tree, all subclasses under the malicious nodes are analyzed, and whether the application program behaviors are malicious behaviors is determined when the application program behavior sensitive information is identical to system pre-configured information. By means of the method and the system, the symbolic execution technology is improved, a guiding symbolic execution technology is introduced, and accordingly, great expansibility is provided for the ...
Подробнее