基于网络行为的Android恶意软件检测方案

An Android malware detection scheme based on network behavior

随着科技的进步,智能手机进入了一个高速发展的阶段,Android手机则是其中最主要的推动力.不过随着Android手机普及,由系统自身安全机制缺陷所带来的安全威胁也越来越大.所以针对Android恶意软件设计出高效率、高准确性的检测方案是非常有必要的.笔者设计了一种基于网络行为分析技术的Android恶意软件检测方案.该方案一方面通过对软件的网络行为进行分析,能够准确地判断出该软件是否被篡改为恶意软件;另一方面,借助于云安全技术,将主要的检测工作部署在云端服务器上,使检测工作能够更加高效.

With the development of science and technology, the smart-phone was developing rapidly, which Android mobile phone made a great contribution. However, when more and more people chose to use Android mobile phones, the security threat made by its security flaws was much bigger. Therefore, against Android malwares, designing an efficient and accurate detection scheme was very necessary. In this paper, an Android malware detection scheme which based on network behavior analysis technology was designed. The scheme could accurately identify whether the application was injected with malicious codes by analyzing its network behavior. On the other hand, main detection works of the detection scheme were deployed on the cloud servers, which could make the detection more efficient.