CN105160250A - Dynamic analysis method and device of APK (Android Packet) application software communication behavior - Google Patents

Dynamic analysis method and device of APK (Android Packet) application software communication behavior Download PDF

Info

Publication number
CN105160250A
CN105160250A CN201510390774.4A CN201510390774A CN105160250A CN 105160250 A CN105160250 A CN 105160250A CN 201510390774 A CN201510390774 A CN 201510390774A CN 105160250 A CN105160250 A CN 105160250A
Authority
CN
China
Prior art keywords
apk file
software communication
run
communication behavior
application software
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201510390774.4A
Other languages
Chinese (zh)
Inventor
吴潇
任彦
项菲
赵淳璐
郭晶
柳毅
杨博
孙旷怡
查奇文
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
National Computer Network and Information Security Management Center
Original Assignee
National Computer Network and Information Security Management Center
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by National Computer Network and Information Security Management Center filed Critical National Computer Network and Information Security Management Center
Priority to CN201510390774.4A priority Critical patent/CN105160250A/en
Publication of CN105160250A publication Critical patent/CN105160250A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/56Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/033Test or assess software

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The invention discloses a dynamic analysis method and device of APK (Android Packet) application software communication behavior. The method comprises the following steps: receiving an APK file uploaded by a user and registration information corresponding to the APK file; according to the registration information, adopting a virtual technology to cause the APK file to run in a sandbox to obtain and record the software communication behavior when the APK file runs; and according to the all recorded software communication behavior, analyzing problems in the running process of the APK file to dynamically analyze the APK file. Through the application of the dynamic analysis method and device, the problem that the problem of software can not be clearly known to cause weak monitoring strength and low user experience when the software is used since an APK application software monitoring method in the prior art adopts running monitoring can be solved

Description

A kind of dynamic analysing method of APK application software communication behavior and device
Technical field
The present invention relates to data analysis field, particularly relate to dynamic analysing method and the device of a kind of APK (installation kit, AndroidPacket) application software communication behavior.
Background technology
At present, Chinese smart machine enlivens number and has exceeded 2.21 hundred million and still increased with surprising rapidity, and along with a large amount of of smart machine popularize, the growth of Mobile solution is also abnormal swift and violent.According to statistics, there is the APP application more than 1,000,000 in the application shop of Apple, and application download is more than 50,000,000,000 times.The Android mobile phone application platform of Google has the APP of more than 700,000, and application download is also more than 48,000,000,000 times at present.The number of applications coming the WindowsPhone platform of the 3rd compares that the above two are less, has close to 14.5 ten thousand APP application.Along with the increased popularity of Mobile solution, user is also faced with more security threat, as: malicious dissemination, rate consumption, privacy is stolen, malice is deducted fees, Long-distance Control etc.
APP quantity gets more and more, and application is more and more extensive, the gesture of the problem brought also gradually in outburst.According to the data display that national Internet emergency center is issued, 2012, China's mobile interchange malicious code quantity reached 160,000, adds 25 times than 2011, and wherein, the malice ratio of deducting fees reaches 39.8%, became maximum mobile phone viruses and threatened; The ratio uploading private data is number two, and is 27.7%.And rogue program is main concentrates on Android platform, the ratio accounting for whole rogue program is 82.5%.Therefore, the supervision of Android platform application market is strengthened extremely urgent.
In recent years, the flow direction of existing laboratory study tracking and Accurate Analysis individual subscriber private data.Researchist has investigated 30 popular application programs, find that wherein 15 meetings send the geographical location information of user to advertiser servers, user profile leak case is serious, therefore a kind of urgently method can analyzing the behavior of APK application software, but, existing analytical approach is all monitor in application software operational process, when namely going wrong when pinpointing the problems; Also have the software of some performance analyses, but be all the instrument of the performance analysis based on Android virus.
In sum, APK application monitors method of the prior art is all take operation monitoring, and just clearly cannot understand this software Problems existing when using software, control and monitoring are more weak, and Consumer's Experience is lower.
Summary of the invention
The invention provides a kind of dynamic analysing method and device of APK application software communication behavior, all take operation monitoring in order to solve APK application monitors method of the prior art, just clearly this software Problems existing cannot be understood when using software, control and monitoring are more weak, the problem that Consumer's Experience is lower.
For solving the problems of the technologies described above, on the one hand, the invention provides a kind of dynamic analysing method of APK application software communication behavior, comprising: receive the APK file uploaded of user and log-on message corresponding to described APK file; In sandbox, Intel Virtualization Technology is adopted to run described APK file according to described log-on message, to obtain software communication behavior when described APK file is run, line item of going forward side by side; According to all software communication behaviors of record, analyze Problems existing in the operation of described APK file, to analyze described APK file dynamically.
Further, in sandbox, Intel Virtualization Technology is adopted to run described APK file according to described log-on message, to obtain software communication behavior when described APK file is run, comprising: adopt Intel Virtualization Technology to run described APK file, and the daily record that described APK file is run is outputted to predetermined directories; Described daily record is resolved, to extract software communication behavior by the script write in advance; The software communication behavior of extracting is imported in presetting database, to store.
Further, described software communication behavior at least comprises one of following: the telephone number that application software corresponding to the accessed or path of file of rewriting of application software corresponding to the network address of the accessible with application software that described APK file is corresponding and network packet, described APK file and title, described APK file obtains application software SMS receiving corresponding to the telephone number transferred to, described APK file and the short message content sent.
Further, according to all software communication behaviors of record, analyze described APK file run in after Problems existing, also comprise: the analysis result of described software communication behavior is returned to user.
On the other hand, the invention provides a kind of performance analysis device of APK application software communication behavior, comprising: receiver module, for receiving APK file that user uploads and log-on message corresponding to described APK file; Run module, for adopting Intel Virtualization Technology to run described APK file in sandbox according to described log-on message, to obtain software communication behavior when described APK file is run, line item of going forward side by side; Analysis module, for all software communication behaviors according to record, analyzes Problems existing in the operation of described APK file, to analyze described APK file dynamically.
Further, described operation module comprises: running unit, for adopting Intel Virtualization Technology to run described APK file, and the daily record that described APK file is run is outputted to predetermined directories; Extraction unit, resolves described daily record, to extract software communication behavior for the script by writing in advance; Import unit, for importing in presetting database, to store by the software communication extracted behavior.
Further, the described software communication behavior that described operation module is extracted at least comprises one of following: the telephone number that application software corresponding to the accessed or path of file of rewriting of application software corresponding to the network address of the accessible with application software that described APK file is corresponding and network packet, described APK file and title, described APK file obtains application software SMS receiving corresponding to the telephone number transferred to, described APK file and the short message content sent.
Further, described device also comprises: result returns module, for the analysis result of described software communication behavior is returned to user.
The present invention is by Intel Virtualization Technology dry run APK file in sandbox, to simulate various states when application software corresponding to APK file is run, obtain software communication behavior when running again, Problems existing in running according to these software communication behavioural analysis APK file, just this software Problems existing clearly can be understood before actual this software of use of user, Consumer's Experience is higher, solving APK application monitors method of the prior art is all take operation monitoring, just clearly this software Problems existing cannot be understood when using software, control and monitoring are more weak, the problem that Consumer's Experience is lower.
Accompanying drawing explanation
Fig. 1 is the process flow diagram of the dynamic analysing method of APK application software communication behavior in the embodiment of the present invention;
Fig. 2 is the structural representation of the performance analysis device of APK application software communication behavior in the embodiment of the present invention;
Fig. 3 is the structural representation of the performance analysis plant running module of APK application software communication behavior in the embodiment of the present invention;
Fig. 4 is the preferred structure schematic diagram of the performance analysis device of APK application software communication behavior in the embodiment of the present invention;
Fig. 5 is the structural representation of the performance analysis device of APK application software communication behavior in the preferred embodiment of the present invention;
Fig. 6 is the process flow diagram of the dynamic analysing method of APK application software communication behavior in the preferred embodiment of the present invention.
Embodiment
All take operation monitoring to solve APK application monitors method of the prior art, just clearly this software Problems existing cannot be understood when using software, control and monitoring are more weak, the problem that Consumer's Experience is lower, the invention provides a kind of dynamic analysing method and device of APK application software communication behavior, below in conjunction with accompanying drawing and embodiment, the present invention is further elaborated.Should be appreciated that specific embodiment described herein only in order to explain the present invention, do not limit the present invention.
The embodiment of the present invention provides a kind of dynamic analysing method of APK application software communication behavior, and the flow process of the method as shown in Figure 1, comprises step S102 to S106:
S102, receives the APK file uploaded of user and log-on message corresponding to APK file;
S104, adopts Intel Virtualization Technology to run APK file according to log-on message in sandbox, to obtain software communication behavior when APK file is run, line item of going forward side by side;
S106, according to all software communication behaviors of record, analyzes Problems existing in APK file operation, to analyze APK file dynamically.
The embodiment of the present invention is by Intel Virtualization Technology dry run APK file in sandbox, to simulate various states when application software corresponding to APK file is run, obtain software communication behavior when running again, Problems existing in running according to these software communication behavioural analysis APK file, just this software Problems existing clearly can be understood before actual this software of use of user, Consumer's Experience is higher, solving APK application monitors method of the prior art is all take operation monitoring, just clearly this software Problems existing cannot be understood when using software, control and monitoring are more weak, the problem that Consumer's Experience is lower.
In the process that said method realizes, in sandbox, Intel Virtualization Technology is adopted to run APK file according to log-on message, following process can be comprised: adopt Intel Virtualization Technology to run APK file, and the daily record that APK file is run is outputted to predetermined directories with the software communication behavior obtained when APK file is run; Daily record is resolved, to extract software communication behavior by the script write in advance; The software communication behavior of extracting is imported in presetting database, to store.Wherein, software communication behavior can comprise multiple, such as, the telephone number that application software corresponding to the accessed or path of file of rewriting of the application software that the network address of the accessible with application software that APK file is corresponding and network packet, APK file are corresponding and title, APK file obtains application software SMS receiving corresponding to telephone number, the APK file transferred to and the short message content etc. sent.
In all software communication behaviors according to record, in the operation of analysis APK file after Problems existing, the analysis result of software communication behavior can also be returned to user, for the problem place that user checks this software, facilitate user to be determined whether by subjectivity.
The embodiment of the present invention additionally provides a kind of performance analysis device of APK application software communication behavior, and its structural representation, as Fig. 2, comprising: receiver module 10, for receiving APK file that user uploads and log-on message corresponding to APK file; Run module 20, be coupled with receiver module 10, for adopting according to log-on message Intel Virtualization Technology to run APK file in sandbox, to obtain software communication behavior when APK file is run, line item of going forward side by side; Analysis module 30, is coupled with operation module 20, for all software communication behaviors according to record, analyzes Problems existing in APK file operation, to analyze APK file dynamically.Wherein, running the software communication behavior that module extracts at least comprises one of following: the telephone number that application software corresponding to the accessed or path of file of rewriting of application software corresponding to the network address of the accessible with application software that APK file is corresponding and network packet, APK file and title, APK file obtains application software SMS receiving corresponding to telephone number, the APK file transferred to and the short message content sent.
The structural representation running module 20 as shown in Figure 3, comprising: running unit 201, for adopting Intel Virtualization Technology to run APK file, and the daily record that APK file is run is outputted to predetermined directories; Extraction unit 202, with running unit 201 with imports unit 203 and be coupled, for the script parsing daily record by writing in advance, to extract software communication behavior; Import unit 203, for importing in presetting database, to store by the software communication extracted behavior.
Preferably, said apparatus can also as shown in Figure 4, comprise: result returns module 40, is coupled with analysis module 30, for the analysis result of software communication behavior is returned to user.
Preferred embodiment
Embodiments provide a kind of performance analysis device of the APK application software communication behavior based on Intel Virtualization Technology, this device is in the present embodiment with independently analytic system form existence, it is mainly divided into three subsystems: comprehensive management subsystem (being equivalent to receiver module), user management is provided, registers, upload APK application software, the functions such as APK application software analysis result have been uploaded in inquiry, wherein, Core Feature is APK upload function and query analysis result function; Performance analysis subsystem (being equivalent to run module and analysis module), by Intel Virtualization Technology dry run APK application software in sandbox, various actions program occurred in operational process are recorded and are imported database; Data process subsystem (be equivalent to result and return module), returns according to the requirement of user the behavioural analysis result that user uploads APK application software in the specific format, analyzes for user.Relation between said apparatus each several part as shown in Figure 5.
The embodiment of the present invention, by using mobile applications dynamic analysis technology, realizes the APK application software communication behavior performance analysis based on Intel Virtualization Technology.Said system is by dry run APK application software, the various actions after operation of Obtaining Accurate program, as network access behavior (obtaining network address and the network packet of application program access), leaking data behavior, local file access and the behavior of rewriting (obtaining the contents such as the path of file that is accessed or that rewrite and title), call behavior (obtaining the telephone number transferred to), going beyond one's commission sends note behavior (telephone number obtaining SMS receiving and the short message content sent), and these behaviors and information completely is returned to user.Below each subsystem of this system is described in detail.
1. comprehensive management subsystem, realized by PHP, Apache, Mysql technology, the user completing this part registers, manage, upload the function of APK application software and query analysis result.
2. performance analysis subsystem, the APK application software that performance analysis user uploads, call Dynamic analysis tools and APK application software is carried out installation dry run, program the term of execution, the daily record that program is run is outputted to particular category by Dynamic analysis tools, recycle the script write to resolve these daily records and extract the network address and network packet that key content accesses as application program, accessed or the content such as the path of file of rewriting and title, obtain the information such as the telephone number of telephone number and the SMS receiving transferred to and the short message content that sends, these contents are imported in database.The subject matter Dynamic analysis tools that may run in this section only supports single task process, namely can only process a task at every turn, in actual applications can energy efficiency lower.Therefore can adopt the multiple simulator of the technical opening of multithreading in the implementation, thus the concurrent processing to multiple APK application software can be performed, to improve analysis efficiency.
3. data process subsystem, returns to user according to the requirement of user by the APK application software behavioural analysis result stored in a database, PHP, Apache, Mysql technology can be adopted to realize.
Based on said system, it carries out the flow process of the dynamic analysing method of APK application software communication behavior as shown in Figure 6, comprises following process S601 to S604:
S601, uploads the program file of APK application software by comprehensive management subsystem.
S602, whether judgement uploads successful.If so, then perform S603, otherwise return S601.
S603, by performance analysis subsystem performance analysis APK application software.
S604, returns to user by display analysis result by data process subsystem.
Although be example object, disclose the preferred embodiments of the present invention, it is also possible for those skilled in the art will recognize various improvement, increase and replacement, and therefore, scope of the present invention should be not limited to above-described embodiment.

Claims (8)

1. a dynamic analysing method for APK application software communication behavior, is characterized in that, comprising:
Receive the APK file uploaded of user and log-on message corresponding to described APK file;
In sandbox, Intel Virtualization Technology is adopted to run described APK file according to described log-on message, to obtain software communication behavior when described APK file is run, line item of going forward side by side;
According to all software communication behaviors of record, analyze Problems existing in the operation of described APK file, to analyze described APK file dynamically.
2. dynamic analysing method as claimed in claim 1, is characterized in that, adopt Intel Virtualization Technology to run described APK file according to described log-on message in sandbox, to obtain software communication behavior when described APK file is run, comprising:
Adopt Intel Virtualization Technology to run described APK file, and the daily record that described APK file is run is outputted to predetermined directories;
Described daily record is resolved, to extract software communication behavior by the script write in advance;
The software communication behavior of extracting is imported in presetting database, to store.
3. dynamic analysing method as claimed in claim 1 or 2, is characterized in that, described software communication behavior at least comprises one of following:
The telephone number that application software corresponding to the accessed or path of file of rewriting of application software corresponding to the network address of the accessible with application software that described APK file is corresponding and network packet, described APK file and title, described APK file obtains application software SMS receiving corresponding to the telephone number transferred to, described APK file and the short message content sent.
4. dynamic analysing method as claimed in claim 1 or 2, is characterized in that, according to all software communication behaviors of record, analyze described APK file run in after Problems existing, also comprise:
The analysis result of described software communication behavior is returned to user.
5. a performance analysis device for APK application software communication behavior, is characterized in that, comprising:
Receiver module, for receiving APK file that user uploads and log-on message corresponding to described APK file;
Run module, for adopting Intel Virtualization Technology to run described APK file in sandbox according to described log-on message, to obtain software communication behavior when described APK file is run, line item of going forward side by side;
Analysis module, for all software communication behaviors according to record, analyzes Problems existing in the operation of described APK file, to analyze described APK file dynamically.
6. performance analysis device as claimed in claim 5, it is characterized in that, described operation module comprises:
Running unit, for adopting Intel Virtualization Technology to run described APK file, and outputs to predetermined directories by the daily record that described APK file is run;
Extraction unit, resolves described daily record, to extract software communication behavior for the script by writing in advance;
Import unit, for importing in presetting database, to store by the software communication extracted behavior.
7. the performance analysis device as described in claim 5 or 6, is characterized in that, the described software communication behavior that described operation module is extracted at least comprises one of following:
The telephone number that application software corresponding to the accessed or path of file of rewriting of application software corresponding to the network address of the accessible with application software that described APK file is corresponding and network packet, described APK file and title, described APK file obtains application software SMS receiving corresponding to the telephone number transferred to, described APK file and the short message content sent.
8. the performance analysis device as described in claim 5 or 6, is characterized in that, described device also comprises:
Result returns module, for the analysis result of described software communication behavior is returned to user.
CN201510390774.4A 2015-07-06 2015-07-06 Dynamic analysis method and device of APK (Android Packet) application software communication behavior Pending CN105160250A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510390774.4A CN105160250A (en) 2015-07-06 2015-07-06 Dynamic analysis method and device of APK (Android Packet) application software communication behavior

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510390774.4A CN105160250A (en) 2015-07-06 2015-07-06 Dynamic analysis method and device of APK (Android Packet) application software communication behavior

Publications (1)

Publication Number Publication Date
CN105160250A true CN105160250A (en) 2015-12-16

Family

ID=54801103

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510390774.4A Pending CN105160250A (en) 2015-07-06 2015-07-06 Dynamic analysis method and device of APK (Android Packet) application software communication behavior

Country Status (1)

Country Link
CN (1) CN105160250A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107273155A (en) * 2017-06-06 2017-10-20 福州汇思博信息技术有限公司 A kind of APK authority distributing methods and system
CN110781483A (en) * 2019-11-05 2020-02-11 深圳市欧瑞博科技有限公司 Control method, platform and storage medium for intelligent household control program transmission permission
WO2021142720A1 (en) * 2020-01-16 2021-07-22 上海卓悠网络科技有限公司 Method for providing sandboxed environment in android system to protect user privacy

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103442360A (en) * 2013-09-09 2013-12-11 北京网秦天下科技有限公司 Method for detecting safety of mobile application, and mobile terminal
CN103729595A (en) * 2014-01-02 2014-04-16 东南大学 Method for offline detecting private data leakage of Android application program
KR20160090566A (en) * 2015-01-22 2016-08-01 국민대학교산학협력단 Apparatus and method for detecting APK malware filter using valid market data

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103442360A (en) * 2013-09-09 2013-12-11 北京网秦天下科技有限公司 Method for detecting safety of mobile application, and mobile terminal
CN103729595A (en) * 2014-01-02 2014-04-16 东南大学 Method for offline detecting private data leakage of Android application program
KR20160090566A (en) * 2015-01-22 2016-08-01 국민대학교산학협력단 Apparatus and method for detecting APK malware filter using valid market data

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
任伟等: "AnDa:恶意代码动态分析系统", 《技术研究》 *
赵洋等: "基于沙盒的Android恶意软件动态分析方案", 《技术研究》 *
陈丹伟等: "给予沙盒技术的恶意程序检测模型", 《计算机科学》 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107273155A (en) * 2017-06-06 2017-10-20 福州汇思博信息技术有限公司 A kind of APK authority distributing methods and system
CN107273155B (en) * 2017-06-06 2021-11-09 福州汇思博信息技术有限公司 APK permission distribution method and system
CN110781483A (en) * 2019-11-05 2020-02-11 深圳市欧瑞博科技有限公司 Control method, platform and storage medium for intelligent household control program transmission permission
WO2021142720A1 (en) * 2020-01-16 2021-07-22 上海卓悠网络科技有限公司 Method for providing sandboxed environment in android system to protect user privacy

Similar Documents

Publication Publication Date Title
CN103186740B (en) A kind of automated detection method of Android malware
US9659105B2 (en) Methods and apparatus to track web browsing sessions
CN106845236A (en) A kind of application program various dimensions privacy leakage detection method and system for iOS platforms
CN106960143B (en) User account identification method and device, storage medium and electronic equipment
CN106295382B (en) A kind of Information Risk preventing control method and device
Silva et al. Benchmark applications used in mobile cloud computing research: a systematic mapping study
CN103200262A (en) Method, device and system for advertisement scheduling based on mobile network
CN105577528B (en) A kind of wechat public platform collecting method and device based on virtual machine
CN104899016A (en) Call stack relationship obtaining method and call stack relationship obtaining device
CN106230809B (en) A kind of mobile Internet public sentiment monitoring method and system based on URL
US9357366B2 (en) Auditing of mobile applications
CN107835132B (en) Method and device for tracking flow source
CN105095207A (en) Methods for retrieving and obtaining contents of application software, and devices for retrieving and obtaining contents of application software
CN104640138B (en) A kind of method and device of orientation problem terminal
CN108667840A (en) Injection loophole detection method and device
CN106897607A (en) A kind of method for monitoring application program and device
CN108681671A (en) A kind of Android mobile attacks source tracing method
CN104980421A (en) Method and system for processing batch requests
CN105160251A (en) Analysis method and device of APK (Android Packet) application software behavior
CN112017007A (en) User behavior data processing method and device, computer equipment and storage medium
CN107577944A (en) Website malicious code detecting method and device based on code syntax analyzer
CN105160250A (en) Dynamic analysis method and device of APK (Android Packet) application software communication behavior
CN113268243A (en) Memory prediction method and device, storage medium and electronic equipment
CN109144834B (en) User behavior data acquisition method and device, android system and terminal equipment
CN108932199B (en) Automatic taint analysis system based on user interface analysis

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20151216

RJ01 Rejection of invention patent application after publication