Method and system for monitoring and analyzing mobile terminal malicious code behaviors

Abstract

The invention discloses a method and system for monitoring and analyzing mobile terminal malicious code behaviors. The method comprises the steps that firstly software programs in a database are distributed to terminal devices; the software programs are installed on the terminal devices and operated, user commonly-used operation is stimulated to trigger malicious code sensitive behaviors, monitoring points are arranged in the terminal devices, and if the sensitive behaviors trigger the monitoring points, the sensitive behaviors are recorded, and then behavior logs are generated; the behavior logs in the terminal devices are collected; correlation analysis is conducted on the behavior logs which belong to the same software program, and the hazard degree of the software program is judged, therefore, mass software program samples can be rapidly processed, and dynamic behavior monitoring and analysis are conducted.

Description

technical field [0001] The invention relates to the technical field of mobile terminal security, in particular to a method and system for monitoring and analyzing malicious code behavior of a mobile terminal. Background technique [0002] With the increasing complexity, intelligence and networking of mobile terminals, the problems faced by mobile terminals in information security have gradually emerged. At present, the mobile terminal structure is relatively loose, there is no measure for unified management and authentication of internal devices, and there is a lack of effective security strategies in the design of the operating system. Mobile terminals will face various forms of threats when performing business applications, such as viruses, leakage of confidential information, illegal tampering of codes, and malicious replacement of key components. [0003] Due to the strong mobility of mobile terminals and the closeness of hardware and operating systems, when sudden mobi...

AI Technical Summary

Problems solved by technology

[0003] Due to the strong mobility of mobile terminals and the closeness of hardware and operating systems, when sudden mobile terminal security incidents or new malicious code families appear, it is difficult for existing malicious code analysis technologies and systems to quickly identify malicious programs. major malicious behaviors, and it is difficult to automatically screen software programs containing malicious code

Images