CN115398431A - 用户信息违规获取检测方法及相关设备 - Google Patents

用户信息违规获取检测方法及相关设备 Download PDF

Info

Publication number
CN115398431A
CN115398431A CN202080099577.6A CN202080099577A CN115398431A CN 115398431 A CN115398431 A CN 115398431A CN 202080099577 A CN202080099577 A CN 202080099577A CN 115398431 A CN115398431 A CN 115398431A
Authority
CN
China
Prior art keywords
detected
user
application program
information
monitoring code
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202080099577.6A
Other languages
English (en)
Inventor
刘洲和
敬辰依
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangdong Oppo Mobile Telecommunications Corp Ltd
Shenzhen Huantai Technology Co Ltd
Original Assignee
Guangdong Oppo Mobile Telecommunications Corp Ltd
Shenzhen Huantai Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangdong Oppo Mobile Telecommunications Corp Ltd, Shenzhen Huantai Technology Co Ltd filed Critical Guangdong Oppo Mobile Telecommunications Corp Ltd
Publication of CN115398431A publication Critical patent/CN115398431A/zh
Pending legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Abstract

本公开公开一种用户信息违规获取检测方法及相关设备。用户信息违规获取检测方法包括：建立与终端设备之间的连接(步骤S102)；获取待检测应用程序的名称(步骤S104)；将监控代码注入到终端设备的待检测应用程序中，以使用Hook技术，使待检测应用程序改变执行逻辑，来执行监控代码(步骤S106)；当接收到基于监控代码获取的、待检测应用程序未经用户允许所获取的需授权用户信息时，显示需授权用户信息，以确定待检测应用程序违规获取用户信息(步骤S108)。

Description

PCT国内申请，说明书已公开。

Claims (10)

  1. PCT国内申请，权利要求书已公开。
CN202080099577.6A 2020-06-02 2020-06-02 用户信息违规获取检测方法及相关设备 Pending CN115398431A (zh)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2020/093985 WO2021243574A1 (zh) 2020-06-02 2020-06-02 用户信息违规获取检测方法及相关设备

Publications (1)

Publication Number Publication Date
CN115398431A true CN115398431A (zh) 2022-11-25

Family

ID=78831492

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202080099577.6A Pending CN115398431A (zh) 2020-06-02 2020-06-02 用户信息违规获取检测方法及相关设备

Country Status (2)

Country Link
CN (1) CN115398431A (zh)
WO (1) WO2021243574A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114356788B (zh) * 2022-03-21 2022-05-31 大鲲智联(成都)科技有限公司 基于用户信息的应用程序检测方法、装置、设备和介质

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103927485A (zh) * 2014-04-24 2014-07-16 东南大学 基于动态监控的Android应用程序风险评估方法
US20170250890A1 (en) * 2016-02-29 2017-08-31 New Relic, Inc. Asynchronous transactions reported as critical path
CN106845236A (zh) * 2017-01-18 2017-06-13 东南大学 一种针对iOS平台的应用程序多维度隐私泄露检测方法及***
CN109542715A (zh) * 2018-10-15 2019-03-29 北京达佳互联信息技术有限公司 采集应用程序性能数据的方法、装置及终端设备
CN110888781B (zh) * 2019-11-21 2021-11-16 腾讯科技（深圳）有限公司 一种应用卡顿检测方法及检测装置

Also Published As

Publication number Publication date
WO2021243574A1 (zh) 2021-12-09

Similar Documents

Publication Publication Date Title
Spreitzenbarth et al. Mobile-Sandbox: combining static and dynamic analysis with machine-learning techniques
CN105956474B (zh) Android平台软件异常行为检测***
US9015832B1 (en) Application auditing through object level code inspection
US8613080B2 (en) Assessment and analysis of software security flaws in virtual machines
US8844043B2 (en) Detection of vulnerabilities in computer systems
CN109150907B (zh) 车载工控机登录方法、装置、***、计算机设备及介质
US20140165204A1 (en) Detection of vulnerabilities in computer systems
US11811824B2 (en) Security system for detecting malicious actor's observation
CN110929264B (zh) 漏洞检测方法、装置、电子设备及可读存储介质
US20160344761A1 (en) System, Method And Apparatus To Visually Configure An Analysis Of A Program
CN112560090B (zh) 一种数据检测方法和装置
US11444970B2 (en) Dynamic security test system
US11595436B2 (en) Rule-based dynamic security test system
Wang et al. Leakdoctor: Toward automatically diagnosing privacy leaks in mobile applications
CN112035354A (zh) 风险代码的定位方法、装置、设备及存储介质
Wang et al. One Size Does Not Fit All: Uncovering and Exploiting Cross Platform Discrepant {APIs} in {WeChat}
CN109697163B (zh) 程序测试方法及设备
Tang et al. Ssldetecter: detecting SSL security vulnerabilities of android applications based on a novel automatic traversal method
CN115398431A (zh) 用户信息违规获取检测方法及相关设备
CN112699369A (zh) 一种通过栈回溯检测异常登录的方法及装置
CN117032894A (zh) 容器安全状态检测方法、装置、电子设备及存储介质
CN115552401A (zh) 一种快应用检测方法、装置、设备及存储介质
CN116450533A (zh) 用于应用程序的安全检测方法、装置、电子设备和介质
CN115828256A (zh) 一种越权与未授权逻辑漏洞检测方法
CN113114681B (zh) 测试报文处理方法、装置、计算机***及可读存储介质

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination