Detection method and apparatus for malicious android application

Abstract

The invention provides a detection method and apparatus for a malicious android application, and relates to the technical field of android systems. The method comprises: obtaining a training sample set consisting of a malicious application sample and a normal application sample; performing fusion feature extraction on the training sample set, and performing selection on the extracted fusion features with a principal component analysis method to obtain android application related fusion features; according to the android application related fusion features, establishing a malicious application detection model based on an extreme learning machine; and according to the malicious application detection model based on the extreme learning machine, detecting a to-be-tested android application and determining whether the to-be-tested android application is a malicious application or not. According to the detection method and apparatus, the problem of incapability of correctly determining a malicious application due to detection failure of the malicious android application possibly caused by a current detection method based on a feature code, a static source code, a dynamic behavior or the like can be solved.

Description

technical field [0001] The invention relates to the technical field of Android systems, in particular to a method and device for detecting malicious Android applications. Background technique [0002] Currently, with the rapid popularization of Android (Android) mobile smart terminals, the types and quantities of Android applications (APP) are also growing in a blowout. However, the ensuing network and information security issues are becoming more and more prominent, mobile smart terminal security incidents emerge in endlessly, mobile malicious applications are rampant, personal privacy theft, tariff consumption and other security issues occur from time to time, seriously affecting the healthy development of the industry. The above-mentioned problems are mostly caused by mobile malicious codes. Mobile malicious codes are usually implanted in the process of APP software development or secondary packaging, and grab economic benefits or spread spam through deception fraud, pri...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a detection method and device for an Android malicious application to solve the problem that current detection methods based on feature codes, static source code analysis, or dynamic behavior may cause the detection of Android malicious applications to fail and cannot be correctly determined. The problem with malicious apps

Images