Technology Research And System Implementation Of The Mobile Malware Detection System

In recent years, mobile phone virus cases have occurred frequently with rapiddevelopment of mobile Internet and popularization of intelligent mobile phones, causinglosses in users’ communication fees and information leakage as well as other harms. As foroperators, mobile phone viruses will occupy a lot of network resources and cause users’ poorperception about network quality, increase in users’ complains, stress aggravation onproblems handling by customer service departments, and other problems. Hence, it is urgentfor mobile network operators to prevent mobile phone viruses.During current prevention of mobile phone viruses, communication operators mainlystart with complaints, and analyze mobile phones and phenomena with complaints afterviruses break out in a large scale and bring influences to users. Uncorrectable losses alwayshave been generated before such lagging analysis. As a result, operators shall set up adetection manner for mobile phone viruses. However, mobile phone viruses are discoveredthrough document scanning or mobile phone detection by terminals in the existing preventiontechnique for mobile phone viruses. Mainly aiming at mobile phone individuals, the methodcan realize detection only when capturing virus samples after discovery of large-scale virusesand is not suitable for communication operators. Hence, telecom operators need a method forquick detection and discovery of mobile phone viruses, which is also suitable to their networkcharacteristics, in order to discover mobile viruses before their large-scale eruption andinfluencing and guide implementation of virus control.Both transmission of mobile viruses and virus outbreak after poisoning will interact withmobile communication network, so the viruses have some special and common behaviors. Forthis reason, the topic mainly researches how to discover mobile phone viruses bycommunication behavior traces and supervise them by inherent network behaviors of viruses.As designed, the study will start from life cycles of mobile phone viruses, analyze cases ofmobile phone viruses, take dissemination, incubation, outbreak and other links of mobilephone viruses as entry points, and extract common network characteristics of mobile phoneviruses according to network interactive records of mobile phone viruses in each link incombination with characteristics of mobile network, in order to set up a judgment model ofmobile phone viruses based on communication behaviors and establish an analysis engine ofvirus behaviors. Meanwhile, it will also expand the existing the stand-alone virion scanningdetection technique into a virus sample scanning engine of mobile network data flow and setup a comprehensive detection and analysis system of mobile phone viruses. With the network detection system of mobile phone viruses in this form, mobile phoneviruses can be discovered at the initial stage of dissemination, incubation and outbreak, so thatdisposal measures can be taken to restrain large-scale eruption of mobile phone viruses. Inthis way, mobile phone users’ personal mobile phone safety including security in informationand fees can be practically protected; furthermore, mobile phone virus cases are effectivelycontrolled, and normal network operation of operators is guaranteed reliably; in the meantime,effective prevention of mobile phone viruses can ensure safety and stability of society andstate as mobile phone virus cases may generate serious negative influences to the society.