Research On Techniques Of Detecting Mobile Ransomware Based On Permission Patterns

In recent years,with the rapid development of Internet technology,a variety of intelligent mobile devices have come into people’s studying and working career.Among them,Android system has become the most part of the mobile operating system.which also makes the devices that equipped with Android system becoming the main target of malicious software.Ransomware is a branch of malware,which squeeze money from users by encrypting user files,locking user devices,etc.,it seriously damages the interests of users.How to quickly and effectively detect the blackmail code in Android applications has become a hot research issue in the field of mobile security.In this paper,against the problem of ransomware detection under Android platform,the detection method based on permission pattern matching has been proposed.Furthermore,the corresponding detection system-RansomDect system has been designed and implemented.This system not only can greatly reduce the workload of ransomware analysis,but also can avoid code encryption and confusion and other interference.The main work of this paper includes:Firstly,the research of the permission pattern of ransomware and detection method.First of all,this article introduces the related background technology of Android system,and specifically analyzed Android system and its security mechanism,then summed up the malware detection technology under the Android platform.Next,this paper analyzes the characteristics of the ransomware under Android platform,including the form of expression,the principle of attack and the features of the permission to apply for.Finally,this paper gives the permission pattern of ransomware,and puts forward the ransomware detection method based on permission pattern.Secondly,the development of the ransomware detection system under Android platform.Based on the detection method above,this paper developed the RansomDect system,which is the detection system of ransomware under Android platform,and elaborates the design and implementation of the system.Experimental study in this paper shows that RansomDect system has good detection effect and efficiency.