Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

A rapid detection method for anti-hardening android platform clone applications

An application program and detection method technology, applied in the field of mobile security and clone software detection, can solve the problems of detection method failure, high time overhead, and inability to be widely used, and achieve the effect of improving detection speed and avoiding impact.

Active Publication Date: 2018-07-24
HUNAN UNIV
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] The clone detection methods described above have several drawbacks that prevent them from being widely used
Among them, the detection method based on code reuse relies on the analysis of code characteristics, and more and more cloning attackers use reinforcement technology to hide the DEX code files in the cloned program, making the detection method based on code reuse invalid; The method of interface features has a large time overhead when extracting interface features and performing similarity calculations, and has great limitations

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A rapid detection method for anti-hardening android platform clone applications
  • A rapid detection method for anti-hardening android platform clone applications
  • A rapid detection method for anti-hardening android platform clone applications

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0041] Such as figure 1 Shown, the present invention comprises the following steps:

[0042] 1. Initialization: Construct a balanced binary tree index based on key vectors;

[0043] 2. Input the functional description of the target application, and use Stanford Parser to extract the keyword vector of the dynamic dimension;

[0044] 3. Use the greedy-based depth-first search algorithm to quickly search for similar applications in the index tree and add them to the candidate set;

[0045] 4. Perform decompression and various conversion operations on the applications in the obtained suspicious clone application collection, and obtain all XML format layout files in the / res / layout directory;

[0046] 5. Filter the layout files, and use a statistical method to filter out external layout files introduced by third-party libraries;

[0047] 6. Convert the filtered layout file into a layout tree of the corresponding structure, and load it into the memory;

[0048] 7. Perform mergin...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a fast detection method for an anti-hardening Android platform clone application program, which includes a preprocessing stage and an accurate detection stage. In the preprocessing stage, by using natural language processing technology to extract keywords from the functional description of the application to construct a vector, the improved search method based on a balanced binary tree is used to quickly find pairs of suspicious clone applications with similar functions. In the formal detection stage, the present invention proposes an application birthmark based on interface layout features and completely independent of source code, which can effectively resist the influence of reinforcement technology, and finally uses the similarity calculation method based on tree-based edit distance, which can accurately calculate Find out the similarity between pairs of suspicious clone programs. The invention can effectively resist the interference of the reinforcement technology, and at the same time realize the fast detection of the cloning application, and has strong practicability.

Description

technical field [0001] The invention relates to the fields of mobile security and clone software detection, in particular to a fast detection method for an anti-hardening Android platform clone application program. Background technique [0002] Android has gradually occupied a dominant position in the mobile market, but it has also attracted a large number of malicious attacks. Most of these malicious programs spread rapidly by cloning existing applications, which not only poses a threat to user security, but also affects the income of legitimate developers. At present, the detection methods for cloned applications on the Android platform can be divided into two categories: one is the detection method based on code reuse: through static analysis of the program code, a specific program birthmark, such as a program dependency graph, a program flow chart, etc., is constructed to complete The calculation of similarity; the other is the detection method based on interface simila...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/56
Inventor 林亚平吕方
Owner HUNAN UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products