A detection method and system for mobile terminal short message interception type malicious code

Abstract

The invention discloses a detection method of mobile terminal short message intercepting type malicious code, comprising: registering a broadcast receiver in the mobile terminal system; using the broadcast processing function of the broadcast receiver to record all short messages newly received by the mobile terminal; After the set time, use all the short messages in the inbox of the mobile terminal to match all the short messages recorded by the broadcast processing function one by one; if the short messages recorded by the broadcast processing function fail to match the short messages in the inbox, the broadcast processing function The recorded short messages with unsuccessful matching are intercepted by malicious codes, and there are short message intercepting malicious codes in the mobile terminal system. The invention also discloses a detection system of mobile terminal short message interception type malicious code. The method and system can automatically run dynamic monitoring, detect malicious codes immediately when the interception occurs, and have more accurate detection and judgment results, and at the same time, the running cost is smaller, and the performance of the system is hardly affected.

Description

technical field [0001] The invention relates to mobile terminal malicious code detection technology, in particular to a method and system for detecting malicious codes with short message interception behavior in an Android system. Background technique [0002] In recent years, the Android system has gradually become one of the main platforms for smart mobile terminals. As the market share continues to expand, malicious code has also spread to this system. Relevant statistics show that in the first quarter of 2011 alone, 101 new viruses and 1014 types of malware were added to the domestic Android platform, accumulatively infecting more than 2.5 million users. 45% of viruses and malicious software (hereinafter collectively referred to as "malicious code") have malicious deduction behaviors, of which more than 53% of malicious deduction software trick users or send service subscription SMS directly to mobile value-added service providers in the background, And intercept the c...

AI Technical Summary

Problems solved by technology

45% of viruses and malicious software (hereinafter collectively referred to as "malicious code") have malicious deduction behaviors, of which more than 53% of malicious deduction software trick users or send service subscription SMS directly to mobile value-added service providers in the background, And intercept the confirmation text message, so that the user pays the business service fee without knowing it, and suffers the most direct economic loss

The problem with this method is that virus analysts with specialized skills are required to analyze and judge, the analysis is difficult and the efficiency is low; Malicious behaviors such as interception have occurred on a large number of users' mobile phones

However, this method is difficult to implement; and it is necessary to modify the Android system module and replace the original module when using it, which may affect the stability of the system operation; in addition, it is necessary to judge the type of broadcast event, and various broadcast messages in the system Too many, the additional judgment overhead will have a non-negligible impact on system performance

Images