移动计算环境下恶意软件静态检测系统设计

Design of malware software static detecting system in mobile computing environment

移动终端在互联网中下载到恶意软件的几率非常高,这对用户信息私密性造成了严重的威胁,但科研组织曾研究出的恶意软件检测系统往往误报率过高、实用性不强。为此,设计移动计算环境下恶意软件静态检测系统,其由特性提取与预处理模块和移动计算终端组成。特性提取与预处理模块根据静态检测特性数据库中的恶意软件标志特性,对用户移动终端软件的安装包特性、资源特性和编译特性进行提取,并使用静态检测函数对提取出的特性进行预处理,给出恶意与非恶意软件的特性分类结果。系统通过移动计算终端对特性分类结果中的恶意软件特性进行位置检测,隔离出用户移动终端中的恶意软件,防止恶意软件继续入侵。经实验分析可知,所设计的系统误报率较低、实用性较强。

The probability of malicious software downloaded in Intemet by mobile terminal is very high, whidh can cause a serious threat to user information privacy. The scientific research organization has developed a malware detection system, but its false alarm rate is often too high, and its practicability is poor. Therefore, a static detecting system of malicious software is designed for the mobile computing environment, which is composed of feature extraction and preprocessing module, and mobile computing terminal. The feature extraction and preprocessing module is used to extract the software installation package, re- source characteristic and compiling feature of user＇s mobile terminal according to the malware software marked features in the static detection feature database. The extracted feature is pretreated with static detecting function to give out the classification results of malicious and non-malicious software features. The position of the malicious software is detected by the mobile computing terminal according to malicious software features in the feature classification result. The malicious software in user＇s mobile terminal is isolated to prevent malicious software to make the continuous invasion. The experimental analysis shows that the designed system has low false alarm rate and strong practicability.