CN103093148A - Detection method, system and device of malicious advertisements - Google Patents

Detection method, system and device of malicious advertisements Download PDF

Info

Publication number
CN103093148A
CN103093148A CN2012105855670A CN201210585567A CN103093148A CN 103093148 A CN103093148 A CN 103093148A CN 2012105855670 A CN2012105855670 A CN 2012105855670A CN 201210585567 A CN201210585567 A CN 201210585567A CN 103093148 A CN103093148 A CN 103093148A
Authority
CN
China
Prior art keywords
malice
advertisement
installation kit
application program
malice advertisement
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2012105855670A
Other languages
Chinese (zh)
Inventor
张寅祥
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangdong Oppo Mobile Telecommunications Corp Ltd
Original Assignee
Guangdong Oppo Mobile Telecommunications Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangdong Oppo Mobile Telecommunications Corp Ltd filed Critical Guangdong Oppo Mobile Telecommunications Corp Ltd
Priority to CN2012105855670A priority Critical patent/CN103093148A/en
Publication of CN103093148A publication Critical patent/CN103093148A/en
Pending legal-status Critical Current

Links

Images

Abstract

The invention is used for intercepting malicious advertisements, and provides a detection method, a system and a device of the malicious advertisements. A mobile terminal sends networking test requests and files list to a server. The files list includes a package name of an application installation package, and a file name and file types of the files included in the application installation package. The server according to the files list, searches malicious advertisements program features matched with the application installation package through the Internet; if he malicious advertisements program features matched with the application installation package are found out, the server sends the malicious advertisements program features matched with application installation package to the mobile terminal so as to intercept malicious advertisements. The detection method, the system and the device of the malicious advertisements effectively intercept malicious advertisements according to the malicious advertisements program features when install the application installation package.

Description

A kind of detection method of malice advertisement, system and equipment
Technical field
The invention belongs to interception malice advertisement field, relate in particular to a kind of detection method, system and equipment of malice advertisement.
Background technology
The application of mobile terminal has entered every field, especially along with third party's application software enrich inserting of function, mobile terminal receives an acclaim all the more; But, along with the various functions of third party software bring convenient the time, also some advertiser or lawless person implant various malice advertisements in the application program installation kit of third party software.
At present, the user can manually arrange to tackle the malice advertisement, or adopt existing fail-safe software application programs installation kit to carry out easy detection, but, along with the speed of software upgrading is accelerated increasingly, the implantation of malice advertisement is also more changeful, due to the limited storage space of mobile terminal, can't store all up-to-date malice advertisement performance of program, thereby can't comprehensively detect by the application programs installation kit.
Summary of the invention
The purpose of the embodiment of the present invention is to provide a kind of detection method of malice advertisement, the problem of carrying out the detection of up-to-date comprehensive malice advertisement with the software package that solves manual setting or can't application programs in mobile terminal.
The embodiment of the present invention is achieved in that a kind of detection method of malice advertisement, and the detection method of described malice advertisement comprises:
Send networking detection request and listed files to server, described listed files comprises the bag name of application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
Another purpose of the present invention is to provide a kind of detection system of malice advertisement, and the detection system of described malice advertisement comprises:
Network and detect request unit, be used for sending networking detection request and listed files to server, described listed files comprises the bag name of described application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Receiving element, be used for reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
Another purpose of the present invention is to provide a kind of mobile terminal, and described mobile terminal comprises the detection system of above-mentioned malice advertisement.
Another purpose of the present invention is to provide a kind of detection method of malice advertisement, and the detection method of described malice advertisement comprises:
The described networking that the response mobile terminal sends detects request, the described listed files that mobile terminal receive sends;
According to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
If find the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
Another purpose of the present invention is to provide a kind of detection system of malice advertisement, and the detection system of described malice advertisement comprises:
Response unit is used for the described networking detection request that the response mobile terminal sends, the described listed files that mobile terminal receive sends;
Search the unit, be used for according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
Feedback unit, if be used for finding the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
Another purpose of the present invention is to provide a kind of server, and described mobile terminal comprises the detection system of above-mentioned malice advertisement.
the embodiment of the present invention provides a kind of detection method of malice advertisement, when the application program installation kit is downloaded complete or installs, and in the time of need to detecting described application program installation kit, mobile terminal transmission networking detection request and listed files are to server, the described networking of server response detects request, and according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet, if find described malice advertisement performance of program, server is sent to mobile terminal with the advertisement of interception malice with described malice advertisement performance of program, thereby, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Description of drawings
In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, the below will do to introduce simply to the accompanying drawing of required use in embodiment or description of the Prior Art, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain according to these accompanying drawings other accompanying drawing.
Fig. 1 is the realization flow figure of the detection method of the malice advertisement that provides of the embodiment of the present invention one;
Fig. 2 is the composition structural drawing of the detection system of the malice advertisement that provides of the embodiment of the present invention two;
Fig. 3 is the realization flow figure of the detection method of the malice advertisement that provides of the embodiment of the present invention three;
Fig. 4 is the composition structural drawing of the detection system of the malice advertisement that provides of the embodiment of the present invention four.
Embodiment
In order to make purpose of the present invention, technical scheme and advantage clearer, below in conjunction with drawings and Examples, the present invention is further elaborated.Should be appreciated that specific embodiment described herein only in order to explain the present invention, is not intended to limit the present invention.
For technical solutions according to the invention are described, describe below by specific embodiment.
Embodiment one:
Fig. 1 shows the realization flow of the detection method of the malice advertisement that the embodiment of the present invention one provides, and for convenience of explanation, only shows the process flow diagram relevant to the embodiment of the present invention, and details are as follows for concrete steps:
Step S101 sends networking detection request and listed files to server, and described listed files comprises the bag name of application program installation kit and filename and the file type of the file that described application program installation kit comprises.
Described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
When whether needs application programs installation kit comprises the malice advertisement when detecting, send networking to server and detect request, and simultaneously listed files is sent to server, can uniquely determine described application program installation kit by described listed files.
in the present embodiment, when mobile terminal is downloaded complete application program installation kit, can send networking to server and detect request to judge whether described application program installation kit comprises the malice characteristic of advertisement, simultaneously, send described listed files to server, can uniquely determine filename and the corresponding file type of all files that described application program installation kit comprises by described listed files, the bag name of application program installation kit, for example: take smart mobile phone that Android system has been installed as example, when having downloaded an application program installation kit, obtain the listed files of this installation bag, described listed files comprises bag name and the AndroidManifest.xml of application A PK, described AndroidManifest.xml has comprised that the filename of the file that this application program installation kit the inside is all and corresponding file type are with unique all files of determining that this application program installation kit comprises.
As one embodiment of the invention, detect request and listed files to the step of server in described transmission networking, described method can also comprise:
According to the malice advertisement performance of program table of mobile terminal, judge whether comprise the malice advertisement in described application program installation kit, described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described transmission networking detects request and listed files to server, can for:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
In the present embodiment, described malice characteristic of advertisement table includes but not limited to: SDK code product placement or that advertising platform provides.
before carrying out the malice purposes of commercial detection by server, can check according to the described malice characteristic of advertisement table in mobile terminal, generally, when described application program installation kit is when having used the application program installation kit of a period of time, just can find the malice advertisement performance of program that mates with described application program installation kit by described malice characteristic of advertisement table, if nothing, there are two kinds of situations, a kind of is that described application program installation kit does not exist the malice advertisement, the another kind of malice advertisement performance of program of not storing described application program installation kit coupling for described malice characteristic of advertisement table, need to send networking detect request and listed files to server to carry out the maliciously inspection of advertisement performance of program.
In the present embodiment, due to the limited storage space of mobile terminal, representational or the common or malice advertisement performance of program that harmfulness is large of a described malice characteristic of advertisement table storage area carries out trial inspection with the application programs installation kit.
Step S102, reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
When needs carry out the malice purposes of commercial detection to described application program installation kit, judge whether described application program installation kit comprises the malice advertisement, if comprise, generate malice advertisement prompting table, described malice advertisement prompting table includes but not limited to all malice advertisement recalls information and interface.
in the present embodiment, when described application program installation kit being carried out the application program installation, that send according to described server and malice advertisement performance of program described application program installation kit coupling, judge whether described application program installation kit comprises the malice advertisement, if comprise, carry out the malice Ad blocking, for example: when certain in moving installation kit is carried the file of malice advertisement, the network that finds described malice ad data according to described malice advertisement performance of program connects the source, connect the source to realize the interception to the malice advertisement by the network of refusing described malice ad data, maybe when downloading to the malice advertisement of mating with described malice advertisement performance of program, forbid opening browsing window or directly deleting described malice ad data of described malice advertisement, can generate the malice advertisement by described malice ad data.
As one embodiment of the invention, after that send at described reception server and the step of malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice, described method can also comprise:
Add the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
Add described application program installation kit and described malice advertisement performance of program to described malice characteristic of advertisement table in the mode of mapping relations.
In the present embodiment, due to the limited storage space of mobile terminal, with the malice advertisement performance of program of described application program installation kit coupling be added into described malice characteristic of advertisement table with the application programs installation kit to carry out trial inspection.
the present embodiment provides a kind of detection method of malice advertisement, carry out initial examination according to described malice characteristic of advertisement table application programs installation kit, if be not checked through the malice advertisement, the detection of networking is asked and listed files is sent to server, reception server is that find with malice advertisement performance of program described application program installation kit coupling and carry out part and preserve in described malice advertisement performance of program table, according to described malice advertisement performance of program, described application program installation kit is detected, really include the malice advertisement if described application program installation kit detected, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Embodiment two:
Fig. 2 shows the composition structure of the detection system of the malice advertisement that the embodiment of the present invention provides, and for convenience of description, only shows the part relevant to the embodiment of the present invention.
The detection system of described malice advertisement can be to run on the unit that software unit, hardware cell or software and hardware in mobile terminal device combine, and also can be used as independently, suspension member is integrated in described terminal device or runs in the application system of described terminal device.
A kind of detection system of malice advertisement, the detection system of described malice advertisement can comprise that networking detects request unit 21 and receiving element 22, and the concrete function of each functional unit is described below:
Network and detect request unit 21, be used for sending networking detection request and listed files to server, described listed files comprises the bag name of described application program installation kit and filename and the file type of the file that described application program installation kit comprises.
Described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
When whether needs application programs installation kit comprises the malice advertisement when detecting, networking detects request unit 21 and sends networking detection request to server, and simultaneously listed files is sent to server, can uniquely determine described application program installation kit by described listed files.
in the present embodiment, when mobile terminal is downloaded complete application program installation kit, networking detects request unit 21 can send networking detection request to judge whether described application program installation kit comprises the malice characteristic of advertisement to server, simultaneously, send described listed files to server, can uniquely determine filename and the corresponding file type of all files that described application program installation kit comprises by described listed files, the bag name of application program installation kit, for example: take smart mobile phone that Android system has been installed as example, when having downloaded an application program installation kit, obtain the listed files of this installation bag, described listed files comprises bag name and the AndroidManifest.xml of application A PK, described AndroidManifest.xml has comprised that the filename of the file that this application program installation kit the inside is all and corresponding file type are with unique all files of determining that this application program installation kit comprises.
As one embodiment of the invention, described detection system also comprises:
Judging unit 23 is used for the malice advertisement performance of program table according to mobile terminal, judges whether comprise the malice advertisement in described application program installation kit, and described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described networking detects request unit 21, can for:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
In the present embodiment, described malice characteristic of advertisement table includes but not limited to: SDK code product placement or that advertising platform provides.
before carrying out the malice purposes of commercial detection by server, can check according to the described malice characteristic of advertisement table in judging unit 23, generally, when described application program installation kit is when having used the application program installation kit of a period of time, just can find the malice advertisement performance of program that mates with described application program installation kit by described malice characteristic of advertisement table, if nothing, there are two kinds of situations, a kind of is that described application program installation kit does not exist the malice advertisement, the another kind of malice advertisement performance of program of not storing described application program installation kit coupling for described malice characteristic of advertisement table, need to network detect request unit 21 send networking detect request and listed files to server to carry out the maliciously inspection of advertisement performance of program.
In the present embodiment, due to the limited storage space of mobile terminal, representational or the common or malice advertisement performance of program that harmfulness is large of a described malice characteristic of advertisement table storage area carries out trial inspection with the application programs installation kit.
Receiving element 22, be used for reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
When needs carry out the malice purposes of commercial detection to described application program installation kit, according to the described malice advertisement performance of program in receiving element 22, judge whether described application program installation kit comprises the malice advertisement, if comprise, generate malice advertisement prompting table, described malice advertisement prompting table includes but not limited to all malice advertisement recalls information and interface.
in the present embodiment, when described application program installation kit being carried out the application program installation, according in described receiving element 22 and malice advertisement performance of program described application program installation kit coupling, judge whether described application program installation kit comprises the malice advertisement, if comprise, carry out the malice Ad blocking, for example: when certain in moving installation kit is carried the file of malice advertisement, the network that finds described malice ad data according to the described malice advertisement performance of program in receiving element 22 connects the source, connect the source to realize the interception to the malice advertisement by the network of refusing described malice ad data, maybe when downloading to the malice advertisement of mating with described malice advertisement performance of program, forbid opening browsing window or directly deleting described malice ad data of described malice advertisement, can generate the malice advertisement by described malice ad data.
As one embodiment of the invention, described detection system can also comprise:
Adding device 24 is used for adding the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
Adding device 24 adds described application program installation kit and described malice advertisement performance of program to described malice characteristic of advertisement table in the mode of mapping relations.
In the present embodiment, due to the limited storage space of mobile terminal, adding device 24 with the malice advertisement performance of program of described application program installation kit coupling be added into described malice characteristic of advertisement table with the application programs installation kit to carry out trial inspection.
As one embodiment of the invention, the present invention also provides a kind of mobile terminal, and described mobile terminal comprises the detection system of the malice advertisement described in embodiment two.
the present embodiment provides a kind of detection system of malice advertisement, malice characteristic of advertisement table application programs installation kit according to judging unit carries out initial examination, if be not checked through the malice advertisement, networking detection request unit will be networked, and detection is asked and listed files is sent to server, the receiving element reception server that find with malice advertisement performance of program described application program installation kit coupling, adding device carries out described malice advertisement performance of program part and preserves in described malice advertisement performance of program table, when according to described malice advertisement performance of program, described application program installation kit being detected, really include the malice advertisement if described application program installation kit detected, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Embodiment three:
Fig. 3 shows the realization flow of the detection method of the malice advertisement that the embodiment of the present invention three provides, and for convenience of explanation, only shows the process flow diagram relevant to the embodiment of the present invention, and details are as follows for concrete steps:
Step S301, the described networking that the response mobile terminal sends detects request, the described listed files that mobile terminal receive sends.
The described networking that mobile terminal receive sends detects request, and replys response signal to mobile terminal; Simultaneously, the relevant information that is used for the malice purposes of commercial detection that mobile terminal receive sends, described relevant information for the malice purposes of commercial detection is including, but not limited to listed files, and described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
Step S302 according to described listed files, searches the malice advertisement performance of program that mates with described application program installation kit by the internet.
In the present embodiment, be connected with the internet, the file that comprises by the unique definite application program installation kit of described listed files and described application program installation kit, whether the temporary file of searching each file, the call relation file between each file that described application program installation kit comprises and generating when installing etc. comprises malice advertisement performance of program, thereby, find out by the internet malice advertisement performance of program whether described application program installation kit comprises coupling.
Step S303, if find the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
In the present embodiment, if find out by the internet malice advertisement performance of program that described application program installation kit comprises coupling, described malice advertisement performance of program is sent to mobile terminal; If find out by the internet malice advertisement performance of program that described application program installation kit does not comprise coupling, described application program installation kit is not comprised the information feedback mobile terminal of malice advertisement performance of program.
the present embodiment provides a kind of detection method of malice advertisement, when the networking that receives the mobile terminal transmission detects request, respond described networking and detect request, simultaneously, reception listed files etc. is used for the information of malice purposes of commercial detection, according to described listed files, whether described application program installation kit being comprised malice advertisement performance of program detects, when described application program installation kit being detected and not comprising malice advertisement performance of program, the information that described application program installation kit is not comprised malice advertisement performance of program feeds back to mobile terminal, when finding described application program installation kit and comprise malice advertisement performance of program, described malice advertisement performance of program is sent to mobile terminal, so that mobile terminal carries out the malice purposes of commercial detection according to described malice advertisement performance of program to described application program installation kit.
Embodiment four:
Fig. 4 shows the composition structure of the detection system of the malice advertisement that the embodiment of the present invention provides, and for convenience of description, only shows the part relevant to the embodiment of the present invention.
The detection system of described malice advertisement can be to run on the unit that software unit, hardware cell or software and hardware in server apparatus combine, and also can be used as independently, suspension member is integrated in described terminal device or runs in the application system of described terminal device.
A kind of detection system of malice advertisement, the detection system of described malice advertisement can comprise response unit 41, search unit 42 and feedback unit 43, and the concrete function of each functional unit is described below:
Response unit 41 is used for the described networking detection request that the response mobile terminal sends, the described listed files that mobile terminal receive sends.
The described networking that response unit 41 mobile terminal receives send detects request, and replys response signal to mobile terminal; Simultaneously, the relevant information that is used for the malice purposes of commercial detection that response unit 41 mobile terminal receives send, described relevant information for the malice purposes of commercial detection is including, but not limited to listed files, and described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
Search unit 42, be used for according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet.
In the present embodiment, be connected with the internet, the file that comprises by the unique definite application program installation kit of described listed files and described application program installation kit, search each file, the call relation file between each file that described application program installation kit comprises searched in unit 42 and generate when installing temporary file etc. and whether comprise malice advertisement performance of program, thereby, find out by the internet malice advertisement performance of program whether described application program installation kit comprises coupling.
Feedback unit 43, if be used for finding the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
In the present embodiment, if find out by the internet malice advertisement performance of program that described application program installation kit comprises coupling, feedback unit 43 is sent to mobile terminal with described malice advertisement performance of program; If find out by the internet malice advertisement performance of program that described application program installation kit does not comprise coupling, feedback unit 43 does not comprise described application program installation kit the information feedback mobile terminal of malice advertisement performance of program.
As one embodiment of the invention, the present invention also provides a kind of server, and described server comprises the detection system of the malice advertisement described in embodiment four.
the present embodiment provides a kind of detection system of malice advertisement, when response unit receives the networking detection request of mobile terminal transmission, respond described networking and detect request, simultaneously, reception listed files etc. is used for the information of malice purposes of commercial detection, whether search the unit comprises malice advertisement performance of program according to described listed files to described application program installation kit and detects, when described application program installation kit being detected and not comprising malice advertisement performance of program, feedback unit feeds back to mobile terminal with the information that described application program installation kit does not comprise malice advertisement performance of program, when finding described application program installation kit and comprise malice advertisement performance of program, feedback unit is sent to mobile terminal with described malice advertisement performance of program, so that mobile terminal carries out the malice purposes of commercial detection according to described malice advertisement performance of program to described application program installation kit.
It will be appreciated by those skilled in the art that, above-described embodiment two and the embodiment four included unit of detection system of described malice advertisement respectively only divide according to function logic, but be not limited to above-mentioned division, as long as can realize corresponding function; In addition, the concrete title of each functional unit also just for the ease of mutual differentiation, is not limited to protection scope of the present invention.
in sum, embodiment of the present invention mobile terminal carries out initial examination according to described malice characteristic of advertisement table application programs installation kit, if be not checked through the malice advertisement, the detection of networking is asked and listed files is sent to server, when whois lookup comprises the malice advertisement performance of program of coupling to described application program installation kit, described malice advertisement performance of program is sent to mobile terminal, thereby, mobile terminal detects described application program installation kit according to described malice advertisement performance of program, really include the malice advertisement if described application program installation kit detected, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Those of ordinary skills it is also understood that, realize that all or part of step in above-described embodiment method is to come the instruction related hardware to complete by program, described program can be stored in computer read/write memory medium, described storage medium comprises ROM/RAM, disk, CD etc.
Above content is in conjunction with concrete preferred implementation further description made for the present invention, can not assert that concrete enforcement of the present invention is confined to these explanations.For the general technical staff of the technical field of the invention; make without departing from the inventive concept of the premise some alternative or obvious modification that are equal to; yet performance or purposes are identical, all should be considered as belonging to the definite scope of patent protection of claims of being submitted to by the present invention.

Claims (10)

1. the detection method of malice advertisement, is characterized in that, the detection method of described malice advertisement comprises:
Send networking detection request and listed files to server, described listed files comprises the bag name of application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
2. the detection method of malice advertisement as claimed in claim 1, is characterized in that, detects request and listed files to the step of server in described transmission networking, and described method also comprises:
According to the malice advertisement performance of program table of mobile terminal, judge whether comprise the malice advertisement in described application program installation kit, described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described transmission networking detection request and listed files are specially to server:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
3. the detection method of malice advertisement as claimed in claim 2, is characterized in that, after that send at described reception server and the step of malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice, described method also comprises:
Add the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
4. the detection system of malice advertisement, is characterized in that, the detection system of described malice advertisement comprises:
Network and detect request unit, be used for sending networking detection request and listed files to server, described listed files comprises the bag name of described application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Receiving element, be used for reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
5. the detection system of malice advertisement as claimed in claim 4, is characterized in that, described detection system also comprises:
Judging unit is used for the malice advertisement performance of program table according to mobile terminal, judges whether comprise the malice advertisement in described application program installation kit, and described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described networking detects request unit, is specially:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
6. the detection system of malice advertisement as claimed in claim 5, is characterized in that, described detection system also comprises:
Adding device is used for adding the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
7. a mobile terminal, is characterized in that, described mobile terminal comprises the detection system of the described malice advertisement of claim 4 to 6.
8. the detection method of malice advertisement, is characterized in that, the detection method of described malice advertisement comprises:
The described networking that the response mobile terminal sends detects request, the described listed files that mobile terminal receive sends;
According to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
If find the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
9. the detection system of malice advertisement, is characterized in that, the detection system of described malice advertisement comprises:
Response unit is used for the described networking detection request that the response mobile terminal sends, the described listed files that mobile terminal receive sends;
Search the unit, be used for according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
Feedback unit, if be used for finding the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
10. a server, is characterized in that, described mobile terminal comprises the detection system of malice advertisement claimed in claim 9.
CN2012105855670A 2012-12-28 2012-12-28 Detection method, system and device of malicious advertisements Pending CN103093148A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2012105855670A CN103093148A (en) 2012-12-28 2012-12-28 Detection method, system and device of malicious advertisements

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2012105855670A CN103093148A (en) 2012-12-28 2012-12-28 Detection method, system and device of malicious advertisements

Publications (1)

Publication Number Publication Date
CN103093148A true CN103093148A (en) 2013-05-08

Family

ID=48205704

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2012105855670A Pending CN103093148A (en) 2012-12-28 2012-12-28 Detection method, system and device of malicious advertisements

Country Status (1)

Country Link
CN (1) CN103093148A (en)

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103942487A (en) * 2014-04-11 2014-07-23 珠海市君天电子科技有限公司 Integral wall information acquisition method and device
CN104182682A (en) * 2013-05-23 2014-12-03 贝壳网际(北京)安全技术有限公司 Method, system, client and server for intercepting advertisements in software installation package
CN104199934A (en) * 2014-09-05 2014-12-10 北京奇虎科技有限公司 Method and device for intercepting advertisements of application program
CN104346568A (en) * 2013-07-26 2015-02-11 贝壳网际(北京)安全技术有限公司 Method and device for identifying malicious application program and mobile device
CN104424200A (en) * 2013-08-21 2015-03-18 贝壳网际(北京)安全技术有限公司 advertisement information processing method and device
CN105530248A (en) * 2015-12-07 2016-04-27 珠海市君天电子科技有限公司 Media advertisement blocking method and device
CN106096394A (en) * 2016-06-16 2016-11-09 北京奇虎科技有限公司 A kind of Ad blocking method and apparatus of Android application
CN106503541A (en) * 2016-10-11 2017-03-15 天脉聚源(北京)传媒科技有限公司 A kind of installation method of installation kit and system
CN106886563A (en) * 2016-12-30 2017-06-23 北界无限(北京)软件有限公司 A kind of advertisement filter method and device
CN106897169A (en) * 2017-02-20 2017-06-27 北京奇虎科技有限公司 A kind of data reconstruction method and device
CN107944265A (en) * 2017-11-30 2018-04-20 北京知道创宇信息技术有限公司 The detection method and computing device in malicious third parties storehouse in a kind of PyPI sources
CN108614849A (en) * 2017-01-13 2018-10-02 南京邮电大学盐城大数据研究院有限公司 A kind of web advertisement detection method based on dynamic pitching pile and static more script page feature extractions
US11762997B2 (en) 2019-07-10 2023-09-19 Five Media Marketing Limited Security management of advertisements at online advertising networks and online advertising exchanges

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101308533A (en) * 2008-06-30 2008-11-19 华为技术有限公司 Method, apparatus and system for virus checking and killing
CN101924761A (en) * 2010-08-18 2010-12-22 奇智软件(北京)有限公司 Method for detecting malicious program according to white list
CN102037471A (en) * 2008-05-21 2011-04-27 赛门铁克公司 Centralized scanner database with optimal definition distribution using network queries
US20110145920A1 (en) * 2008-10-21 2011-06-16 Lookout, Inc System and method for adverse mobile application identification
CN102594780A (en) * 2011-01-12 2012-07-18 西门子公司 Method and device for detecting and clearing mobile terminal viruses
CN102664884A (en) * 2012-04-18 2012-09-12 南京邮电大学 Malicious code recognition method based on cloud computing
CN102663286A (en) * 2012-03-21 2012-09-12 奇智软件(北京)有限公司 Method and device for identifying virus APK (android package)
CN102663281A (en) * 2012-03-16 2012-09-12 成都市华为赛门铁克科技有限公司 Method and device for detecting malicious software
CN102663285A (en) * 2012-03-21 2012-09-12 奇智软件(北京)有限公司 Extracting method and extracting device for APK (android package) virus characteristic code
CN102831338A (en) * 2012-06-28 2012-12-19 北京奇虎科技有限公司 Security detection method and system of Android application program

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102037471A (en) * 2008-05-21 2011-04-27 赛门铁克公司 Centralized scanner database with optimal definition distribution using network queries
CN101308533A (en) * 2008-06-30 2008-11-19 华为技术有限公司 Method, apparatus and system for virus checking and killing
US20110145920A1 (en) * 2008-10-21 2011-06-16 Lookout, Inc System and method for adverse mobile application identification
CN101924761A (en) * 2010-08-18 2010-12-22 奇智软件(北京)有限公司 Method for detecting malicious program according to white list
CN102594780A (en) * 2011-01-12 2012-07-18 西门子公司 Method and device for detecting and clearing mobile terminal viruses
CN102663281A (en) * 2012-03-16 2012-09-12 成都市华为赛门铁克科技有限公司 Method and device for detecting malicious software
CN102663286A (en) * 2012-03-21 2012-09-12 奇智软件(北京)有限公司 Method and device for identifying virus APK (android package)
CN102663285A (en) * 2012-03-21 2012-09-12 奇智软件(北京)有限公司 Extracting method and extracting device for APK (android package) virus characteristic code
CN102664884A (en) * 2012-04-18 2012-09-12 南京邮电大学 Malicious code recognition method based on cloud computing
CN102831338A (en) * 2012-06-28 2012-12-19 北京奇虎科技有限公司 Security detection method and system of Android application program

Cited By (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104182682A (en) * 2013-05-23 2014-12-03 贝壳网际(北京)安全技术有限公司 Method, system, client and server for intercepting advertisements in software installation package
CN104346568A (en) * 2013-07-26 2015-02-11 贝壳网际(北京)安全技术有限公司 Method and device for identifying malicious application program and mobile device
CN104424200A (en) * 2013-08-21 2015-03-18 贝壳网际(北京)安全技术有限公司 advertisement information processing method and device
CN103942487A (en) * 2014-04-11 2014-07-23 珠海市君天电子科技有限公司 Integral wall information acquisition method and device
CN103942487B (en) * 2014-04-11 2017-06-27 珠海市君天电子科技有限公司 Integrate the acquisition methods and device of wall information
CN104199934B (en) * 2014-09-05 2017-07-04 北京奇虎科技有限公司 The method and device that advertisement for application program is intercepted
CN104199934A (en) * 2014-09-05 2014-12-10 北京奇虎科技有限公司 Method and device for intercepting advertisements of application program
CN105530248A (en) * 2015-12-07 2016-04-27 珠海市君天电子科技有限公司 Media advertisement blocking method and device
CN106096394A (en) * 2016-06-16 2016-11-09 北京奇虎科技有限公司 A kind of Ad blocking method and apparatus of Android application
CN106503541A (en) * 2016-10-11 2017-03-15 天脉聚源(北京)传媒科技有限公司 A kind of installation method of installation kit and system
CN106503541B (en) * 2016-10-11 2019-07-26 天脉聚源(北京)传媒科技有限公司 A kind of installation method and system of installation kit
CN106886563A (en) * 2016-12-30 2017-06-23 北界无限(北京)软件有限公司 A kind of advertisement filter method and device
CN106886563B (en) * 2016-12-30 2020-11-10 北界无限(北京)软件有限公司 Advertisement filtering method and device
CN108614849A (en) * 2017-01-13 2018-10-02 南京邮电大学盐城大数据研究院有限公司 A kind of web advertisement detection method based on dynamic pitching pile and static more script page feature extractions
CN106897169A (en) * 2017-02-20 2017-06-27 北京奇虎科技有限公司 A kind of data reconstruction method and device
CN106897169B (en) * 2017-02-20 2020-03-10 北京安云世纪科技有限公司 Data recovery method and device
CN107944265A (en) * 2017-11-30 2018-04-20 北京知道创宇信息技术有限公司 The detection method and computing device in malicious third parties storehouse in a kind of PyPI sources
CN107944265B (en) * 2017-11-30 2019-10-18 北京知道创宇信息技术股份有限公司 The detection method in malicious third parties library and equipment is calculated in a kind of source PyPI
US11762997B2 (en) 2019-07-10 2023-09-19 Five Media Marketing Limited Security management of advertisements at online advertising networks and online advertising exchanges

Similar Documents

Publication Publication Date Title
CN103093148A (en) Detection method, system and device of malicious advertisements
US10187855B2 (en) Message processing method and apparatus
CN103365644B (en) A kind of method and device of expanding software function
CN106528432A (en) Construction method and apparatus for test scene data, and buried point test method
US20150026330A1 (en) Generating unique identifiers for mobile devices
CN108701038B (en) Method for displaying advertisement by terminal, terminal and advertisement delivery system
CN104850301A (en) Method and system for classifying application icons on system desktop
CN102063299A (en) Method and device for assessing application running condition of mobile terminal, mobile terminal
CN103279706A (en) Method and device for intercepting installation of Android application program in mobile terminal
CN103067391A (en) Method, system and device of malicious permission detection
CN108319662A (en) Page processing method, device, electronic equipment and readable storage medium storing program for executing
US9747449B2 (en) Method and device for preventing application in an operating system from being uninstalled
CN103345696B (en) A kind of pushed information display methods, device and mobile terminal
WO2017080366A1 (en) Method and apparatus for recognising camouflage download link
KR20110128632A (en) Method and device for detecting malicious action of application program for smartphone
CN102724276A (en) Information transmitting method and system based on android system
CN103593233A (en) Method and system for pushing software information
CN108196902A (en) For showing the method and apparatus for advertisement of spreading its tail
US20120198035A1 (en) Install system and install method
CN106020917B (en) A kind of software installation method and device, user terminal
CN103425501A (en) Application installation method, client, server side and system
US8086778B2 (en) Filter driver to enumerate smartcard nodes for plug and play
CN104298521A (en) Window updating method and device
US7778660B2 (en) Mobile communications terminal, information transmitting system and information receiving method
CN102769663A (en) Server, method and system for transmitting information

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20130508

RJ01 Rejection of invention patent application after publication