Research And Development Of Malicious Code Detection System Based On N-GRAM

In recent years,with the popularity of smart phones,the number of Android applications has grown explosively,and the number of malicious software has also grown.How to effectively detect these malicious applications hidden in normal applications and provide users with effective authentication information has become more and more important.This article starts from the actual demand,carries on the thorough research to the domestic and foreign Android malicious code detection system,designs the malicious code detection system which satisfies the current user use demand.In the design stage,the system proposes a streamlined method for Android application opcode for N-GRAM algorithm,and deeply studies a number of classification algorithms.In combination with the actual situation,the classification algorithm that is most suitable for the system is selected.This article implements a malicious code detection system based on N-GRAM.The development process is strictly in accordance with software engineering methods and theories.First,UML is used to design the system,Visio completes the system design diagram,and then from the business,function,and data in the requirements analysis section.The system has been completely analyzed in three aspects.Secondly,the system design part uses the use case diagram,timing diagram and activity diagram to design the system.Finally,the database table is designed based on the actual reference data requirement analysis part.In the part of system implementation,after expounding the overall architecture of the system,the realization effect of each module was demonstrated,and the core code was listed.The N-GRAM-based malicious code detection system developed by the thesis is based on the MongoDB database as the back-end database,ExpressJS as the Web application framework,AngularJS as the front-end MVC framework,and Node.js as the concurrent asynchronous event-driven Javascript server back-end development platform.Through the implementation and testing of the system,malicious applications hidden in normal applications can be effectively detected,providing users with security protection and decision support.