CN103093148A - Detection method, system and device of malicious advertisements - Google Patents
Detection method, system and device of malicious advertisements Download PDFInfo
- Publication number
- CN103093148A CN103093148A CN2012105855670A CN201210585567A CN103093148A CN 103093148 A CN103093148 A CN 103093148A CN 2012105855670 A CN2012105855670 A CN 2012105855670A CN 201210585567 A CN201210585567 A CN 201210585567A CN 103093148 A CN103093148 A CN 103093148A
- Authority
- CN
- China
- Prior art keywords
- malice
- advertisement
- installation kit
- application program
- malice advertisement
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The invention is used for intercepting malicious advertisements, and provides a detection method, a system and a device of the malicious advertisements. A mobile terminal sends networking test requests and files list to a server. The files list includes a package name of an application installation package, and a file name and file types of the files included in the application installation package. The server according to the files list, searches malicious advertisements program features matched with the application installation package through the Internet; if he malicious advertisements program features matched with the application installation package are found out, the server sends the malicious advertisements program features matched with application installation package to the mobile terminal so as to intercept malicious advertisements. The detection method, the system and the device of the malicious advertisements effectively intercept malicious advertisements according to the malicious advertisements program features when install the application installation package.
Description
Technical field
The invention belongs to interception malice advertisement field, relate in particular to a kind of detection method, system and equipment of malice advertisement.
Background technology
The application of mobile terminal has entered every field, especially along with third party's application software enrich inserting of function, mobile terminal receives an acclaim all the more; But, along with the various functions of third party software bring convenient the time, also some advertiser or lawless person implant various malice advertisements in the application program installation kit of third party software.
At present, the user can manually arrange to tackle the malice advertisement, or adopt existing fail-safe software application programs installation kit to carry out easy detection, but, along with the speed of software upgrading is accelerated increasingly, the implantation of malice advertisement is also more changeful, due to the limited storage space of mobile terminal, can't store all up-to-date malice advertisement performance of program, thereby can't comprehensively detect by the application programs installation kit.
Summary of the invention
The purpose of the embodiment of the present invention is to provide a kind of detection method of malice advertisement, the problem of carrying out the detection of up-to-date comprehensive malice advertisement with the software package that solves manual setting or can't application programs in mobile terminal.
The embodiment of the present invention is achieved in that a kind of detection method of malice advertisement, and the detection method of described malice advertisement comprises:
Send networking detection request and listed files to server, described listed files comprises the bag name of application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
Another purpose of the present invention is to provide a kind of detection system of malice advertisement, and the detection system of described malice advertisement comprises:
Network and detect request unit, be used for sending networking detection request and listed files to server, described listed files comprises the bag name of described application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Receiving element, be used for reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
Another purpose of the present invention is to provide a kind of mobile terminal, and described mobile terminal comprises the detection system of above-mentioned malice advertisement.
Another purpose of the present invention is to provide a kind of detection method of malice advertisement, and the detection method of described malice advertisement comprises:
The described networking that the response mobile terminal sends detects request, the described listed files that mobile terminal receive sends;
According to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
If find the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
Another purpose of the present invention is to provide a kind of detection system of malice advertisement, and the detection system of described malice advertisement comprises:
Response unit is used for the described networking detection request that the response mobile terminal sends, the described listed files that mobile terminal receive sends;
Search the unit, be used for according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
Feedback unit, if be used for finding the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
Another purpose of the present invention is to provide a kind of server, and described mobile terminal comprises the detection system of above-mentioned malice advertisement.
the embodiment of the present invention provides a kind of detection method of malice advertisement, when the application program installation kit is downloaded complete or installs, and in the time of need to detecting described application program installation kit, mobile terminal transmission networking detection request and listed files are to server, the described networking of server response detects request, and according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet, if find described malice advertisement performance of program, server is sent to mobile terminal with the advertisement of interception malice with described malice advertisement performance of program, thereby, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Description of drawings
In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, the below will do to introduce simply to the accompanying drawing of required use in embodiment or description of the Prior Art, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain according to these accompanying drawings other accompanying drawing.
Fig. 1 is the realization flow figure of the detection method of the malice advertisement that provides of the embodiment of the present invention one;
Fig. 2 is the composition structural drawing of the detection system of the malice advertisement that provides of the embodiment of the present invention two;
Fig. 3 is the realization flow figure of the detection method of the malice advertisement that provides of the embodiment of the present invention three;
Fig. 4 is the composition structural drawing of the detection system of the malice advertisement that provides of the embodiment of the present invention four.
Embodiment
In order to make purpose of the present invention, technical scheme and advantage clearer, below in conjunction with drawings and Examples, the present invention is further elaborated.Should be appreciated that specific embodiment described herein only in order to explain the present invention, is not intended to limit the present invention.
For technical solutions according to the invention are described, describe below by specific embodiment.
Embodiment one:
Fig. 1 shows the realization flow of the detection method of the malice advertisement that the embodiment of the present invention one provides, and for convenience of explanation, only shows the process flow diagram relevant to the embodiment of the present invention, and details are as follows for concrete steps:
Step S101 sends networking detection request and listed files to server, and described listed files comprises the bag name of application program installation kit and filename and the file type of the file that described application program installation kit comprises.
Described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
When whether needs application programs installation kit comprises the malice advertisement when detecting, send networking to server and detect request, and simultaneously listed files is sent to server, can uniquely determine described application program installation kit by described listed files.
in the present embodiment, when mobile terminal is downloaded complete application program installation kit, can send networking to server and detect request to judge whether described application program installation kit comprises the malice characteristic of advertisement, simultaneously, send described listed files to server, can uniquely determine filename and the corresponding file type of all files that described application program installation kit comprises by described listed files, the bag name of application program installation kit, for example: take smart mobile phone that Android system has been installed as example, when having downloaded an application program installation kit, obtain the listed files of this installation bag, described listed files comprises bag name and the AndroidManifest.xml of application A PK, described AndroidManifest.xml has comprised that the filename of the file that this application program installation kit the inside is all and corresponding file type are with unique all files of determining that this application program installation kit comprises.
As one embodiment of the invention, detect request and listed files to the step of server in described transmission networking, described method can also comprise:
According to the malice advertisement performance of program table of mobile terminal, judge whether comprise the malice advertisement in described application program installation kit, described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described transmission networking detects request and listed files to server, can for:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
In the present embodiment, described malice characteristic of advertisement table includes but not limited to: SDK code product placement or that advertising platform provides.
before carrying out the malice purposes of commercial detection by server, can check according to the described malice characteristic of advertisement table in mobile terminal, generally, when described application program installation kit is when having used the application program installation kit of a period of time, just can find the malice advertisement performance of program that mates with described application program installation kit by described malice characteristic of advertisement table, if nothing, there are two kinds of situations, a kind of is that described application program installation kit does not exist the malice advertisement, the another kind of malice advertisement performance of program of not storing described application program installation kit coupling for described malice characteristic of advertisement table, need to send networking detect request and listed files to server to carry out the maliciously inspection of advertisement performance of program.
In the present embodiment, due to the limited storage space of mobile terminal, representational or the common or malice advertisement performance of program that harmfulness is large of a described malice characteristic of advertisement table storage area carries out trial inspection with the application programs installation kit.
Step S102, reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
When needs carry out the malice purposes of commercial detection to described application program installation kit, judge whether described application program installation kit comprises the malice advertisement, if comprise, generate malice advertisement prompting table, described malice advertisement prompting table includes but not limited to all malice advertisement recalls information and interface.
in the present embodiment, when described application program installation kit being carried out the application program installation, that send according to described server and malice advertisement performance of program described application program installation kit coupling, judge whether described application program installation kit comprises the malice advertisement, if comprise, carry out the malice Ad blocking, for example: when certain in moving installation kit is carried the file of malice advertisement, the network that finds described malice ad data according to described malice advertisement performance of program connects the source, connect the source to realize the interception to the malice advertisement by the network of refusing described malice ad data, maybe when downloading to the malice advertisement of mating with described malice advertisement performance of program, forbid opening browsing window or directly deleting described malice ad data of described malice advertisement, can generate the malice advertisement by described malice ad data.
As one embodiment of the invention, after that send at described reception server and the step of malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice, described method can also comprise:
Add the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
Add described application program installation kit and described malice advertisement performance of program to described malice characteristic of advertisement table in the mode of mapping relations.
In the present embodiment, due to the limited storage space of mobile terminal, with the malice advertisement performance of program of described application program installation kit coupling be added into described malice characteristic of advertisement table with the application programs installation kit to carry out trial inspection.
the present embodiment provides a kind of detection method of malice advertisement, carry out initial examination according to described malice characteristic of advertisement table application programs installation kit, if be not checked through the malice advertisement, the detection of networking is asked and listed files is sent to server, reception server is that find with malice advertisement performance of program described application program installation kit coupling and carry out part and preserve in described malice advertisement performance of program table, according to described malice advertisement performance of program, described application program installation kit is detected, really include the malice advertisement if described application program installation kit detected, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Embodiment two:
Fig. 2 shows the composition structure of the detection system of the malice advertisement that the embodiment of the present invention provides, and for convenience of description, only shows the part relevant to the embodiment of the present invention.
The detection system of described malice advertisement can be to run on the unit that software unit, hardware cell or software and hardware in mobile terminal device combine, and also can be used as independently, suspension member is integrated in described terminal device or runs in the application system of described terminal device.
A kind of detection system of malice advertisement, the detection system of described malice advertisement can comprise that networking detects request unit 21 and receiving element 22, and the concrete function of each functional unit is described below:
Network and detect request unit 21, be used for sending networking detection request and listed files to server, described listed files comprises the bag name of described application program installation kit and filename and the file type of the file that described application program installation kit comprises.
Described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
When whether needs application programs installation kit comprises the malice advertisement when detecting, networking detects request unit 21 and sends networking detection request to server, and simultaneously listed files is sent to server, can uniquely determine described application program installation kit by described listed files.
in the present embodiment, when mobile terminal is downloaded complete application program installation kit, networking detects request unit 21 can send networking detection request to judge whether described application program installation kit comprises the malice characteristic of advertisement to server, simultaneously, send described listed files to server, can uniquely determine filename and the corresponding file type of all files that described application program installation kit comprises by described listed files, the bag name of application program installation kit, for example: take smart mobile phone that Android system has been installed as example, when having downloaded an application program installation kit, obtain the listed files of this installation bag, described listed files comprises bag name and the AndroidManifest.xml of application A PK, described AndroidManifest.xml has comprised that the filename of the file that this application program installation kit the inside is all and corresponding file type are with unique all files of determining that this application program installation kit comprises.
As one embodiment of the invention, described detection system also comprises:
Described networking detects request unit 21, can for:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
In the present embodiment, described malice characteristic of advertisement table includes but not limited to: SDK code product placement or that advertising platform provides.
before carrying out the malice purposes of commercial detection by server, can check according to the described malice characteristic of advertisement table in judging unit 23, generally, when described application program installation kit is when having used the application program installation kit of a period of time, just can find the malice advertisement performance of program that mates with described application program installation kit by described malice characteristic of advertisement table, if nothing, there are two kinds of situations, a kind of is that described application program installation kit does not exist the malice advertisement, the another kind of malice advertisement performance of program of not storing described application program installation kit coupling for described malice characteristic of advertisement table, need to network detect request unit 21 send networking detect request and listed files to server to carry out the maliciously inspection of advertisement performance of program.
In the present embodiment, due to the limited storage space of mobile terminal, representational or the common or malice advertisement performance of program that harmfulness is large of a described malice characteristic of advertisement table storage area carries out trial inspection with the application programs installation kit.
Receiving element 22, be used for reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
When needs carry out the malice purposes of commercial detection to described application program installation kit, according to the described malice advertisement performance of program in receiving element 22, judge whether described application program installation kit comprises the malice advertisement, if comprise, generate malice advertisement prompting table, described malice advertisement prompting table includes but not limited to all malice advertisement recalls information and interface.
in the present embodiment, when described application program installation kit being carried out the application program installation, according in described receiving element 22 and malice advertisement performance of program described application program installation kit coupling, judge whether described application program installation kit comprises the malice advertisement, if comprise, carry out the malice Ad blocking, for example: when certain in moving installation kit is carried the file of malice advertisement, the network that finds described malice ad data according to the described malice advertisement performance of program in receiving element 22 connects the source, connect the source to realize the interception to the malice advertisement by the network of refusing described malice ad data, maybe when downloading to the malice advertisement of mating with described malice advertisement performance of program, forbid opening browsing window or directly deleting described malice ad data of described malice advertisement, can generate the malice advertisement by described malice ad data.
As one embodiment of the invention, described detection system can also comprise:
Adding device 24 is used for adding the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
Adding device 24 adds described application program installation kit and described malice advertisement performance of program to described malice characteristic of advertisement table in the mode of mapping relations.
In the present embodiment, due to the limited storage space of mobile terminal, adding device 24 with the malice advertisement performance of program of described application program installation kit coupling be added into described malice characteristic of advertisement table with the application programs installation kit to carry out trial inspection.
As one embodiment of the invention, the present invention also provides a kind of mobile terminal, and described mobile terminal comprises the detection system of the malice advertisement described in embodiment two.
the present embodiment provides a kind of detection system of malice advertisement, malice characteristic of advertisement table application programs installation kit according to judging unit carries out initial examination, if be not checked through the malice advertisement, networking detection request unit will be networked, and detection is asked and listed files is sent to server, the receiving element reception server that find with malice advertisement performance of program described application program installation kit coupling, adding device carries out described malice advertisement performance of program part and preserves in described malice advertisement performance of program table, when according to described malice advertisement performance of program, described application program installation kit being detected, really include the malice advertisement if described application program installation kit detected, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Embodiment three:
Fig. 3 shows the realization flow of the detection method of the malice advertisement that the embodiment of the present invention three provides, and for convenience of explanation, only shows the process flow diagram relevant to the embodiment of the present invention, and details are as follows for concrete steps:
Step S301, the described networking that the response mobile terminal sends detects request, the described listed files that mobile terminal receive sends.
The described networking that mobile terminal receive sends detects request, and replys response signal to mobile terminal; Simultaneously, the relevant information that is used for the malice purposes of commercial detection that mobile terminal receive sends, described relevant information for the malice purposes of commercial detection is including, but not limited to listed files, and described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
Step S302 according to described listed files, searches the malice advertisement performance of program that mates with described application program installation kit by the internet.
In the present embodiment, be connected with the internet, the file that comprises by the unique definite application program installation kit of described listed files and described application program installation kit, whether the temporary file of searching each file, the call relation file between each file that described application program installation kit comprises and generating when installing etc. comprises malice advertisement performance of program, thereby, find out by the internet malice advertisement performance of program whether described application program installation kit comprises coupling.
Step S303, if find the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
In the present embodiment, if find out by the internet malice advertisement performance of program that described application program installation kit comprises coupling, described malice advertisement performance of program is sent to mobile terminal; If find out by the internet malice advertisement performance of program that described application program installation kit does not comprise coupling, described application program installation kit is not comprised the information feedback mobile terminal of malice advertisement performance of program.
the present embodiment provides a kind of detection method of malice advertisement, when the networking that receives the mobile terminal transmission detects request, respond described networking and detect request, simultaneously, reception listed files etc. is used for the information of malice purposes of commercial detection, according to described listed files, whether described application program installation kit being comprised malice advertisement performance of program detects, when described application program installation kit being detected and not comprising malice advertisement performance of program, the information that described application program installation kit is not comprised malice advertisement performance of program feeds back to mobile terminal, when finding described application program installation kit and comprise malice advertisement performance of program, described malice advertisement performance of program is sent to mobile terminal, so that mobile terminal carries out the malice purposes of commercial detection according to described malice advertisement performance of program to described application program installation kit.
Embodiment four:
Fig. 4 shows the composition structure of the detection system of the malice advertisement that the embodiment of the present invention provides, and for convenience of description, only shows the part relevant to the embodiment of the present invention.
The detection system of described malice advertisement can be to run on the unit that software unit, hardware cell or software and hardware in server apparatus combine, and also can be used as independently, suspension member is integrated in described terminal device or runs in the application system of described terminal device.
A kind of detection system of malice advertisement, the detection system of described malice advertisement can comprise response unit 41, search unit 42 and feedback unit 43, and the concrete function of each functional unit is described below:
The described networking that response unit 41 mobile terminal receives send detects request, and replys response signal to mobile terminal; Simultaneously, the relevant information that is used for the malice purposes of commercial detection that response unit 41 mobile terminal receives send, described relevant information for the malice purposes of commercial detection is including, but not limited to listed files, and described listed files is including, but not limited to filename and the file type of the file that the bag name of application program installation kit and described application program installation kit comprise.
In the present embodiment, be connected with the internet, the file that comprises by the unique definite application program installation kit of described listed files and described application program installation kit, search each file, the call relation file between each file that described application program installation kit comprises searched in unit 42 and generate when installing temporary file etc. and whether comprise malice advertisement performance of program, thereby, find out by the internet malice advertisement performance of program whether described application program installation kit comprises coupling.
In the present embodiment, if find out by the internet malice advertisement performance of program that described application program installation kit comprises coupling, feedback unit 43 is sent to mobile terminal with described malice advertisement performance of program; If find out by the internet malice advertisement performance of program that described application program installation kit does not comprise coupling, feedback unit 43 does not comprise described application program installation kit the information feedback mobile terminal of malice advertisement performance of program.
As one embodiment of the invention, the present invention also provides a kind of server, and described server comprises the detection system of the malice advertisement described in embodiment four.
the present embodiment provides a kind of detection system of malice advertisement, when response unit receives the networking detection request of mobile terminal transmission, respond described networking and detect request, simultaneously, reception listed files etc. is used for the information of malice purposes of commercial detection, whether search the unit comprises malice advertisement performance of program according to described listed files to described application program installation kit and detects, when described application program installation kit being detected and not comprising malice advertisement performance of program, feedback unit feeds back to mobile terminal with the information that described application program installation kit does not comprise malice advertisement performance of program, when finding described application program installation kit and comprise malice advertisement performance of program, feedback unit is sent to mobile terminal with described malice advertisement performance of program, so that mobile terminal carries out the malice purposes of commercial detection according to described malice advertisement performance of program to described application program installation kit.
It will be appreciated by those skilled in the art that, above-described embodiment two and the embodiment four included unit of detection system of described malice advertisement respectively only divide according to function logic, but be not limited to above-mentioned division, as long as can realize corresponding function; In addition, the concrete title of each functional unit also just for the ease of mutual differentiation, is not limited to protection scope of the present invention.
in sum, embodiment of the present invention mobile terminal carries out initial examination according to described malice characteristic of advertisement table application programs installation kit, if be not checked through the malice advertisement, the detection of networking is asked and listed files is sent to server, when whois lookup comprises the malice advertisement performance of program of coupling to described application program installation kit, described malice advertisement performance of program is sent to mobile terminal, thereby, mobile terminal detects described application program installation kit according to described malice advertisement performance of program, really include the malice advertisement if described application program installation kit detected, when described application program installation kit is installed, according to described malice advertisement performance of program to malice advertisement effectively tackle.
Those of ordinary skills it is also understood that, realize that all or part of step in above-described embodiment method is to come the instruction related hardware to complete by program, described program can be stored in computer read/write memory medium, described storage medium comprises ROM/RAM, disk, CD etc.
Above content is in conjunction with concrete preferred implementation further description made for the present invention, can not assert that concrete enforcement of the present invention is confined to these explanations.For the general technical staff of the technical field of the invention; make without departing from the inventive concept of the premise some alternative or obvious modification that are equal to; yet performance or purposes are identical, all should be considered as belonging to the definite scope of patent protection of claims of being submitted to by the present invention.
Claims (10)
1. the detection method of malice advertisement, is characterized in that, the detection method of described malice advertisement comprises:
Send networking detection request and listed files to server, described listed files comprises the bag name of application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
2. the detection method of malice advertisement as claimed in claim 1, is characterized in that, detects request and listed files to the step of server in described transmission networking, and described method also comprises:
According to the malice advertisement performance of program table of mobile terminal, judge whether comprise the malice advertisement in described application program installation kit, described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described transmission networking detection request and listed files are specially to server:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
3. the detection method of malice advertisement as claimed in claim 2, is characterized in that, after that send at described reception server and the step of malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice, described method also comprises:
Add the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
4. the detection system of malice advertisement, is characterized in that, the detection system of described malice advertisement comprises:
Network and detect request unit, be used for sending networking detection request and listed files to server, described listed files comprises the bag name of described application program installation kit and filename and the file type of the file that described application program installation kit comprises;
Receiving element, be used for reception server that send with malice advertisement performance of program described application program installation kit coupling with the advertisement of interception malice.
5. the detection system of malice advertisement as claimed in claim 4, is characterized in that, described detection system also comprises:
Judging unit is used for the malice advertisement performance of program table according to mobile terminal, judges whether comprise the malice advertisement in described application program installation kit, and described malice characteristic of advertisement table comprises malice advertisement performance of program;
Described networking detects request unit, is specially:
Do not comprise the malice advertisement in described application program installation kit, send networking detection request and listed files to server.
6. the detection system of malice advertisement as claimed in claim 5, is characterized in that, described detection system also comprises:
Adding device is used for adding the malice advertisement performance of program of described and described application program installation kit coupling to described malice characteristic of advertisement table.
7. a mobile terminal, is characterized in that, described mobile terminal comprises the detection system of the described malice advertisement of claim 4 to 6.
8. the detection method of malice advertisement, is characterized in that, the detection method of described malice advertisement comprises:
The described networking that the response mobile terminal sends detects request, the described listed files that mobile terminal receive sends;
According to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
If find the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
9. the detection system of malice advertisement, is characterized in that, the detection system of described malice advertisement comprises:
Response unit is used for the described networking detection request that the response mobile terminal sends, the described listed files that mobile terminal receive sends;
Search the unit, be used for according to described listed files, search the malice advertisement performance of program that mates with described application program installation kit by the internet;
Feedback unit, if be used for finding the malice advertisement performance of program that mates with described application program installation kit, the malice advertisement performance of program that described and described application program installation kit is mated is sent to mobile terminal.
10. a server, is characterized in that, described mobile terminal comprises the detection system of malice advertisement claimed in claim 9.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2012105855670A CN103093148A (en) | 2012-12-28 | 2012-12-28 | Detection method, system and device of malicious advertisements |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2012105855670A CN103093148A (en) | 2012-12-28 | 2012-12-28 | Detection method, system and device of malicious advertisements |
Publications (1)
Publication Number | Publication Date |
---|---|
CN103093148A true CN103093148A (en) | 2013-05-08 |
Family
ID=48205704
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN2012105855670A Pending CN103093148A (en) | 2012-12-28 | 2012-12-28 | Detection method, system and device of malicious advertisements |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN103093148A (en) |
Cited By (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103942487A (en) * | 2014-04-11 | 2014-07-23 | 珠海市君天电子科技有限公司 | Integral wall information acquisition method and device |
CN104182682A (en) * | 2013-05-23 | 2014-12-03 | 贝壳网际(北京)安全技术有限公司 | Method, system, client and server for intercepting advertisements in software installation package |
CN104199934A (en) * | 2014-09-05 | 2014-12-10 | 北京奇虎科技有限公司 | Method and device for intercepting advertisements of application program |
CN104346568A (en) * | 2013-07-26 | 2015-02-11 | 贝壳网际(北京)安全技术有限公司 | Method and device for identifying malicious application program and mobile device |
CN104424200A (en) * | 2013-08-21 | 2015-03-18 | 贝壳网际(北京)安全技术有限公司 | advertisement information processing method and device |
CN105530248A (en) * | 2015-12-07 | 2016-04-27 | 珠海市君天电子科技有限公司 | Media advertisement blocking method and device |
CN106096394A (en) * | 2016-06-16 | 2016-11-09 | 北京奇虎科技有限公司 | A kind of Ad blocking method and apparatus of Android application |
CN106503541A (en) * | 2016-10-11 | 2017-03-15 | 天脉聚源(北京)传媒科技有限公司 | A kind of installation method of installation kit and system |
CN106886563A (en) * | 2016-12-30 | 2017-06-23 | 北界无限(北京)软件有限公司 | A kind of advertisement filter method and device |
CN106897169A (en) * | 2017-02-20 | 2017-06-27 | 北京奇虎科技有限公司 | A kind of data reconstruction method and device |
CN107944265A (en) * | 2017-11-30 | 2018-04-20 | 北京知道创宇信息技术有限公司 | The detection method and computing device in malicious third parties storehouse in a kind of PyPI sources |
CN108614849A (en) * | 2017-01-13 | 2018-10-02 | 南京邮电大学盐城大数据研究院有限公司 | A kind of web advertisement detection method based on dynamic pitching pile and static more script page feature extractions |
US11762997B2 (en) | 2019-07-10 | 2023-09-19 | Five Media Marketing Limited | Security management of advertisements at online advertising networks and online advertising exchanges |
Citations (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101308533A (en) * | 2008-06-30 | 2008-11-19 | 华为技术有限公司 | Method, apparatus and system for virus checking and killing |
CN101924761A (en) * | 2010-08-18 | 2010-12-22 | 奇智软件(北京)有限公司 | Method for detecting malicious program according to white list |
CN102037471A (en) * | 2008-05-21 | 2011-04-27 | 赛门铁克公司 | Centralized scanner database with optimal definition distribution using network queries |
US20110145920A1 (en) * | 2008-10-21 | 2011-06-16 | Lookout, Inc | System and method for adverse mobile application identification |
CN102594780A (en) * | 2011-01-12 | 2012-07-18 | 西门子公司 | Method and device for detecting and clearing mobile terminal viruses |
CN102664884A (en) * | 2012-04-18 | 2012-09-12 | 南京邮电大学 | Malicious code recognition method based on cloud computing |
CN102663286A (en) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | Method and device for identifying virus APK (android package) |
CN102663281A (en) * | 2012-03-16 | 2012-09-12 | 成都市华为赛门铁克科技有限公司 | Method and device for detecting malicious software |
CN102663285A (en) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | Extracting method and extracting device for APK (android package) virus characteristic code |
CN102831338A (en) * | 2012-06-28 | 2012-12-19 | 北京奇虎科技有限公司 | Security detection method and system of Android application program |
-
2012
- 2012-12-28 CN CN2012105855670A patent/CN103093148A/en active Pending
Patent Citations (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102037471A (en) * | 2008-05-21 | 2011-04-27 | 赛门铁克公司 | Centralized scanner database with optimal definition distribution using network queries |
CN101308533A (en) * | 2008-06-30 | 2008-11-19 | 华为技术有限公司 | Method, apparatus and system for virus checking and killing |
US20110145920A1 (en) * | 2008-10-21 | 2011-06-16 | Lookout, Inc | System and method for adverse mobile application identification |
CN101924761A (en) * | 2010-08-18 | 2010-12-22 | 奇智软件(北京)有限公司 | Method for detecting malicious program according to white list |
CN102594780A (en) * | 2011-01-12 | 2012-07-18 | 西门子公司 | Method and device for detecting and clearing mobile terminal viruses |
CN102663281A (en) * | 2012-03-16 | 2012-09-12 | 成都市华为赛门铁克科技有限公司 | Method and device for detecting malicious software |
CN102663286A (en) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | Method and device for identifying virus APK (android package) |
CN102663285A (en) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | Extracting method and extracting device for APK (android package) virus characteristic code |
CN102664884A (en) * | 2012-04-18 | 2012-09-12 | 南京邮电大学 | Malicious code recognition method based on cloud computing |
CN102831338A (en) * | 2012-06-28 | 2012-12-19 | 北京奇虎科技有限公司 | Security detection method and system of Android application program |
Cited By (19)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104182682A (en) * | 2013-05-23 | 2014-12-03 | 贝壳网际(北京)安全技术有限公司 | Method, system, client and server for intercepting advertisements in software installation package |
CN104346568A (en) * | 2013-07-26 | 2015-02-11 | 贝壳网际(北京)安全技术有限公司 | Method and device for identifying malicious application program and mobile device |
CN104424200A (en) * | 2013-08-21 | 2015-03-18 | 贝壳网际(北京)安全技术有限公司 | advertisement information processing method and device |
CN103942487A (en) * | 2014-04-11 | 2014-07-23 | 珠海市君天电子科技有限公司 | Integral wall information acquisition method and device |
CN103942487B (en) * | 2014-04-11 | 2017-06-27 | 珠海市君天电子科技有限公司 | Integrate the acquisition methods and device of wall information |
CN104199934B (en) * | 2014-09-05 | 2017-07-04 | 北京奇虎科技有限公司 | The method and device that advertisement for application program is intercepted |
CN104199934A (en) * | 2014-09-05 | 2014-12-10 | 北京奇虎科技有限公司 | Method and device for intercepting advertisements of application program |
CN105530248A (en) * | 2015-12-07 | 2016-04-27 | 珠海市君天电子科技有限公司 | Media advertisement blocking method and device |
CN106096394A (en) * | 2016-06-16 | 2016-11-09 | 北京奇虎科技有限公司 | A kind of Ad blocking method and apparatus of Android application |
CN106503541A (en) * | 2016-10-11 | 2017-03-15 | 天脉聚源(北京)传媒科技有限公司 | A kind of installation method of installation kit and system |
CN106503541B (en) * | 2016-10-11 | 2019-07-26 | 天脉聚源(北京)传媒科技有限公司 | A kind of installation method and system of installation kit |
CN106886563A (en) * | 2016-12-30 | 2017-06-23 | 北界无限(北京)软件有限公司 | A kind of advertisement filter method and device |
CN106886563B (en) * | 2016-12-30 | 2020-11-10 | 北界无限(北京)软件有限公司 | Advertisement filtering method and device |
CN108614849A (en) * | 2017-01-13 | 2018-10-02 | 南京邮电大学盐城大数据研究院有限公司 | A kind of web advertisement detection method based on dynamic pitching pile and static more script page feature extractions |
CN106897169A (en) * | 2017-02-20 | 2017-06-27 | 北京奇虎科技有限公司 | A kind of data reconstruction method and device |
CN106897169B (en) * | 2017-02-20 | 2020-03-10 | 北京安云世纪科技有限公司 | Data recovery method and device |
CN107944265A (en) * | 2017-11-30 | 2018-04-20 | 北京知道创宇信息技术有限公司 | The detection method and computing device in malicious third parties storehouse in a kind of PyPI sources |
CN107944265B (en) * | 2017-11-30 | 2019-10-18 | 北京知道创宇信息技术股份有限公司 | The detection method in malicious third parties library and equipment is calculated in a kind of source PyPI |
US11762997B2 (en) | 2019-07-10 | 2023-09-19 | Five Media Marketing Limited | Security management of advertisements at online advertising networks and online advertising exchanges |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN103093148A (en) | Detection method, system and device of malicious advertisements | |
US10187855B2 (en) | Message processing method and apparatus | |
CN103365644B (en) | A kind of method and device of expanding software function | |
CN106528432A (en) | Construction method and apparatus for test scene data, and buried point test method | |
US20150026330A1 (en) | Generating unique identifiers for mobile devices | |
CN108701038B (en) | Method for displaying advertisement by terminal, terminal and advertisement delivery system | |
CN104850301A (en) | Method and system for classifying application icons on system desktop | |
CN102063299A (en) | Method and device for assessing application running condition of mobile terminal, mobile terminal | |
CN103279706A (en) | Method and device for intercepting installation of Android application program in mobile terminal | |
CN103067391A (en) | Method, system and device of malicious permission detection | |
CN108319662A (en) | Page processing method, device, electronic equipment and readable storage medium storing program for executing | |
US9747449B2 (en) | Method and device for preventing application in an operating system from being uninstalled | |
CN103345696B (en) | A kind of pushed information display methods, device and mobile terminal | |
WO2017080366A1 (en) | Method and apparatus for recognising camouflage download link | |
KR20110128632A (en) | Method and device for detecting malicious action of application program for smartphone | |
CN102724276A (en) | Information transmitting method and system based on android system | |
CN103593233A (en) | Method and system for pushing software information | |
CN108196902A (en) | For showing the method and apparatus for advertisement of spreading its tail | |
US20120198035A1 (en) | Install system and install method | |
CN106020917B (en) | A kind of software installation method and device, user terminal | |
CN103425501A (en) | Application installation method, client, server side and system | |
US8086778B2 (en) | Filter driver to enumerate smartcard nodes for plug and play | |
CN104298521A (en) | Window updating method and device | |
US7778660B2 (en) | Mobile communications terminal, information transmitting system and information receiving method | |
CN102769663A (en) | Server, method and system for transmitting information |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
RJ01 | Rejection of invention patent application after publication |
Application publication date: 20130508 |
|
RJ01 | Rejection of invention patent application after publication |