移动设备恶意代码分析与检测技术研究

Research on Malicious Code Analysis and Detection Technology of Mobile Equipment

当前,各种移动设备快速普及,移动应用为人类带来各种新的互联网体验。然而,移动应用在给人类带来新的服务的同时,其中存在的信息泄露、欺骗仿冒、病毒木马等安全隐患也严重威胁着用户的个人信息和财产安全。笔者开展移动设备恶意代码分析和检测技术研究,首先从应用开放环境和检测躲避技术两个方面阐述了移动恶意代码产生且难以根治的原因,然后介绍了当前常见移动恶意代码检测技术,包括基于特征码的检测技术、基于代码分析的检测技术和基于行为监控的检测技术三种,并详细说明这三种方法的基本原理和优缺点。

At present,with the rapid spread of various mobile devices,mobile applications provide a variety of new Internet experience for human beings.However,mobile applications in bringing new services to humans at the same time,the existence of information disclosure,deceive counterfeiting,virus Trojans and so on security risks are also a serious threat to the user's personal information and property security.In this paper,the research on malicious code analysis and detection technology of mobile devices is carried out.Firstly,the causes of mobile malicious code generation and difficult to cure are expounded from two aspects of application open environment and detection and avoidance technology.Then,the common mobile malicious code detection technology is introduced.It includes the detection technology based on signature,the detection technology based on code analysis and the detection technology based on behavior monitoring,and the basic principles and advantages and disadvantages of these three methods are elaborated in detail.