User privacy information protection method and user privacy information protection system

Abstract

The invention relates to a user privacy information protection method. The method comprises steps that: step 1, a pick-up module carries out interface calling operation to acquire basic interface information, and a redirection filtering method is employed to carry out filtering analysis on operation which may access to sensitive information; step 2, operation log data information sent by terminal equipment is received by a parsing module, information in an interface calling database is called, and an operation log of sensitive operation is recorded; step 3, processing on information in a suspected-behavior operation database is carried out by a detection module, information-stealing operation is screened out based on information of a black list database, and information-stealing operation behavior information is stored in the black list database, and step 4, information-stealing operation is processed according to the information-stealing operation behavior information stored in the black list database. According to the user privacy information protection method, an information-stealing behavior can be monitored, a latent information-stealing threat can be discovered, and the information-stealing operation is stopped; sensitive information circulation is monitored; and user privacy data can be comprehensively monitored and protected.

Description

technical field [0001] The invention relates to a method and system for protecting user privacy information, belonging to the technical field of network and information security. Background technique [0002] With the rapid development of mobile Internet and the continuous increase of mobile smart terminal service applications, mobile smart terminals have become more and more important tools in people's life and work. Compared with terminals such as desktop computers and notebook computers, mobile smart terminals are more suitable for people to carry with them, may store more private information, and are online in real time for a long time. These features are more beneficial to attackers. They use phishing, malicious codes and other illegal means to trick users into installing mobile phone Trojans or spyware, and collect their private data (including contacts, text messages, call recordings, and even It is the current location information, real-time audio and video informat...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to provide an active detection and application programming interface hook based on log information to solve the problems of limited types of monitoring data, difficulty in active discovery, and inability to effectively block the existing mobile smart terminal user privacy information protection technology. User privacy information protection method combined with monitoring

Images