一种安卓系统非正常程序的检测方法实证研究

Empirical Study on Detecting Abnormal Procedures in Android Systems

针对安卓系统非正常程序较多的现状,提出一种新的检测方法,结合了应用程序分类以及系统调用法,目的是提高安卓系统非正常程序检测的准确性。计算分类的数据采自谷歌商店,非正常程序样本采自安卓病毒共享库,通过系统调用值和阈值的计算对比,判断实验样本的正常性。实验结果表明:本文提出的方法能够准确检测出安卓系统中的非正常程序,有一定的推广价值。

Aiming at the current situation that there are many abnormal programs in Android system,a new detection method is proposed,which combines application classification and system call method.The purpose is to improve the accuracy of the detection of abnormal programs in Android system.The classified data were collected from Google Store,and the abnormal program samples were collected from Android virus shared library.The normality of the experimental samples was judged by comparing the system call values and thresholds.The experimental results show that the method proposed in this paper can accurately detect abnormal programs in Android system,and has certain popularization value.