PL3373626T3 - Sposób i urządzenie do zarządzania ryzykiem informacji z aplikacji - Google Patents

Sposób i urządzenie do zarządzania ryzykiem informacji z aplikacji

Info

Publication number
PL3373626T3
PL3373626T3 PL16861478T PL16861478T PL3373626T3 PL 3373626 T3 PL3373626 T3 PL 3373626T3 PL 16861478 T PL16861478 T PL 16861478T PL 16861478 T PL16861478 T PL 16861478T PL 3373626 T3 PL3373626 T3 PL 3373626T3
Authority
PL
Poland
Prior art keywords
application information
risk management
risk
management
information
Prior art date
Application number
PL16861478T
Other languages
English (en)
Inventor
Lizhong LI
Yanan Zhang
Original Assignee
Alibaba Group Holding Limited
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Limited filed Critical Alibaba Group Holding Limited
Publication of PL3373626T3 publication Critical patent/PL3373626T3/pl

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/30—Security of mobile devices; Security of mobile applications
    • H04W12/33—Security of mobile devices; Security of mobile applications using wearable devices, e.g. using a smartwatch or smart-glasses
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/23—Updating
    • G06F16/2365—Ensuring data consistency and integrity
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90—Details of database functions independent of the retrieved data types
    • G06F16/95—Retrieval from the web
    • G06F16/951—Indexing; Web crawling techniques
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90—Details of database functions independent of the retrieved data types
    • G06F16/95—Retrieval from the web
    • G06F16/955—Retrieval from the web using information identifiers, e.g. uniform resource locators [URL]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433—Vulnerability analysis
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/145—Countermeasures against malicious traffic the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1483—Countermeasures against malicious traffic service impersonation, e.g. phishing, pharming or web spoofing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1491—Countermeasures against malicious traffic using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • H04W12/122—Counter-measures against attacks; Protection against rogue devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/128—Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12—Messaging; Mailboxes; Announcements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12—Messaging; Mailboxes; Announcements
    • H04W4/14—Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Software Systems (AREA)
  • Databases & Information Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Information Transfer Between Computers (AREA)
  • Debugging And Monitoring (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Telephonic Communication Services (AREA)
PL16861478T 2015-11-05 2016-10-27 Sposób i urządzenie do zarządzania ryzykiem informacji z aplikacji PL3373626T3 (pl)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
CN201510746296.6A CN106686599B (zh) 2015-11-05 2015-11-05 一种用于应用信息的风险管理的方法与设备
PCT/CN2016/103489 WO2017076210A1 (zh) 2015-11-05 2016-10-27 一种用于应用信息的风险管理的方法与设备
EP16861478.2A EP3373626B1 (en) 2015-11-05 2016-10-27 Method and device for use in risk management of application information

Publications (1)

Publication Number Publication Date
PL3373626T3 true PL3373626T3 (pl) 2021-01-11

Family

ID=58662494

Family Applications (1)

Application Number Title Priority Date Filing Date
PL16861478T PL3373626T3 (pl) 2015-11-05 2016-10-27 Sposób i urządzenie do zarządzania ryzykiem informacji z aplikacji

Country Status (12)

Country Link
US (1) US10715550B2 (pl)
EP (1) EP3373626B1 (pl)
JP (1) JP6609047B2 (pl)
KR (1) KR102071160B1 (pl)
CN (1) CN106686599B (pl)
AU (1) AU2016351177B2 (pl)
ES (1) ES2808954T3 (pl)
MY (1) MY186170A (pl)
PH (1) PH12018500971B1 (pl)
PL (1) PL3373626T3 (pl)
SG (2) SG10201908340RA (pl)
WO (1) WO2017076210A1 (pl)

Families Citing this family (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107896287B (zh) * 2017-09-30 2021-06-18 深圳壹账通智能科技有限公司 手机号码风险监测方法、移动终端及计算机可读存储介质
CN111212432B (zh) * 2018-11-21 2023-04-28 中国移动通信集团江西有限公司 定位伪基站的方法、装置、设备和介质
CN109981567A (zh) * 2019-02-13 2019-07-05 平安科技（深圳）有限公司 网络验证数据的发送方法、装置、存储介质和服务器
JP7338847B2 (ja) * 2019-02-20 2023-09-05 日本電気通信システム株式会社 Ｓｍｓ詐欺対策システム、ｓｍｓ詐欺対策方法、およびｓｍｓ詐欺対策プログラム
CN110139230B (zh) * 2019-05-28 2021-11-09 北京小米移动软件有限公司 转发短信的方法、装置及智能设备
US12101349B2 (en) 2019-09-16 2024-09-24 The Toronto-Dominion Bank Systems and methods for detecting changes in data access pattern of third-party applications
US11275842B2 (en) 2019-09-20 2022-03-15 The Toronto-Dominion Bank Systems and methods for evaluating security of third-party applications
US11436336B2 (en) 2019-09-23 2022-09-06 The Toronto-Dominion Bank Systems and methods for evaluating data access signature of third-party applications
CN110908556A (zh) * 2019-10-24 2020-03-24 深圳传音控股股份有限公司 交互方法、交互装置、移动终端及计算机可读存储介质
US11914719B1 (en) 2020-04-15 2024-02-27 Wells Fargo Bank, N.A. Systems and methods for cyberthreat-risk education and awareness
CN111898159B (zh) * 2020-07-31 2024-07-12 维沃移动通信有限公司 风险提示方法、装置、电子设备及可读存储介质
US11496514B2 (en) * 2020-07-31 2022-11-08 KnowBe4, Inc. Systems and methods for security awareness using ad-based simulated phishing attacks
CN113015170A (zh) * 2021-03-05 2021-06-22 中国工商银行股份有限公司 短信验证方法、装置、电子设备和介质
WO2022265404A1 (ko) * 2021-06-15 2022-12-22 주식회사 에스앤피랩 개인정보 관리 서버 및 이의 작동 방법
US12271502B2 (en) * 2021-09-28 2025-04-08 Docusign, Inc. Delegated signing using sensitivity classification
US11909804B2 (en) * 2022-01-11 2024-02-20 Red Hat, Inc. Selective validation of a portion of a server response to a client request
CN114943601A (zh) * 2022-05-31 2022-08-26 中国银行股份有限公司 一种业务代办理审核方法和系统、电子设备、存储介质
CN116709339B (zh) * 2022-10-09 2024-07-12 荣耀终端有限公司 一种应用通知消息的检测方法及电子设备
CN116701914B (zh) * 2023-06-21 2024-07-05 广东星云开物科技股份有限公司 一种硬件设备异常使用识别方法、装置、存储装置及系统

Family Cites Families (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9106694B2 (en) * 2004-04-01 2015-08-11 Fireeye, Inc. Electronic message analysis for malware detection
US8037527B2 (en) * 2004-11-08 2011-10-11 Bt Web Solutions, Llc Method and apparatus for look-ahead security scanning
US20080082662A1 (en) * 2006-05-19 2008-04-03 Richard Dandliker Method and apparatus for controlling access to network resources based on reputation
WO2008097869A1 (en) * 2007-02-02 2008-08-14 Iconix, Inc. Authenticating and confidence marking e-mail messages
EP1990750A1 (en) 2007-05-09 2008-11-12 Nokia Siemens Networks Oy Method and device for data processing and communication system comprising such device
JP2009289001A (ja) * 2008-05-29 2009-12-10 Softbank Mobile Corp 迷惑メール対策支援システム、迷惑メール対策支援方法及び迷惑メール対策支援プログラム
US20100083381A1 (en) * 2008-09-30 2010-04-01 Khosravi Hormuzd M Hardware-based anti-virus scan service
JP5440973B2 (ja) * 2009-02-23 2014-03-12 独立行政法人情報通信研究機構 コンピュータ検査システム、コンピュータ検査方法
CN101815262A (zh) * 2010-04-13 2010-08-25 深圳市五巨科技有限公司 一种移动终端垃圾短信息屏蔽方法和装置
KR20110128632A (ko) * 2010-05-24 2011-11-30 충남대학교산학협력단 스마트폰 응용프로그램의 악성행위 탐지 방법 및 장치
WO2012027588A1 (en) * 2010-08-25 2012-03-01 Lookout, Inc. System and method for server-coupled malware prevention
US8959626B2 (en) * 2010-12-14 2015-02-17 F-Secure Corporation Detecting a suspicious entity in a communication network
US20130019281A1 (en) * 2011-07-11 2013-01-17 Cisco Technology, Inc. Server Based Remote Authentication for BIOS
CN103391520B (zh) * 2012-05-08 2016-01-20 腾讯科技（深圳）有限公司 一种拦截恶意短信的方法、终端、服务器及系统
CN102801706A (zh) * 2012-06-28 2012-11-28 宇龙计算机通信科技(深圳)有限公司 终端和信息内容的安全性处理方法
WO2014056538A1 (en) * 2012-10-11 2014-04-17 Nokia Solutions And Networks Oy Fake base station detection with core network support
CN103118026B (zh) * 2013-02-01 2017-07-11 北京奇虎科技有限公司 显示网址安全鉴定信息的方法及装置
KR101321721B1 (ko) * 2013-03-20 2013-10-28 주식회사 시큐브 적법한 인증 메시지 확인 시스템 및 방법
US9100831B2 (en) * 2013-04-15 2015-08-04 Cellco Partnership Disabling mobile devices that originate message service spam
US9300686B2 (en) * 2013-06-28 2016-03-29 Fireeye, Inc. System and method for detecting malicious links in electronic messages
KR101507404B1 (ko) * 2013-10-01 2015-04-07 주식회사 엘지유플러스 이동 통신 단말기 및 응용 프로그램 정보 관리 서버 및 그 제어 방법, 악성 응용 프로그램 처리 방법
JP5973413B2 (ja) * 2013-11-26 2016-08-23 ビッグローブ株式会社 端末装置、ｗｅｂメールサーバ、安全確認方法、及び安全確認プログラム
KR20150062644A (ko) * 2013-11-29 2015-06-08 (주)노르마 스미싱 메시지 검출 시스템과 이에 사용되는 서버 및 프로그램을 기록한 기록매체
KR101540672B1 (ko) * 2014-01-13 2015-07-31 주식회사 엔피코어 이동 단말기의 해킹 방지 시스템 및 그 방법
CN104023320A (zh) * 2014-05-14 2014-09-03 北京奇虎科技有限公司 消息提示方法及装置
CN104378345B (zh) * 2014-06-24 2016-04-13 腾讯科技（深圳）有限公司 移动客户端url的安全检测方法及系统
CN104539624B (zh) * 2015-01-08 2019-06-04 北京奇虎科技有限公司 文本中号码信息的安全监测方法及装置

Also Published As

Publication number Publication date
US10715550B2 (en) 2020-07-14
JP2019502192A (ja) 2019-01-24
PH12018500971A1 (en) 2018-12-17
MY186170A (en) 2021-06-30
AU2016351177B2 (en) 2020-01-30
KR102071160B1 (ko) 2020-01-29
EP3373626B1 (en) 2020-07-22
EP3373626A4 (en) 2019-04-10
US20180255097A1 (en) 2018-09-06
JP6609047B2 (ja) 2019-11-20
SG11201803771TA (en) 2018-06-28
ES2808954T3 (es) 2021-03-02
EP3373626A1 (en) 2018-09-12
SG10201908340RA (en) 2019-10-30
CN106686599B (zh) 2020-10-20
KR20180082504A (ko) 2018-07-18
AU2016351177A1 (en) 2018-06-14
WO2017076210A1 (zh) 2017-05-11
CN106686599A (zh) 2017-05-17
PH12018500971B1 (en) 2021-08-20

Similar Documents

Publication Publication Date Title
PL3373626T3 (pl) Sposób i urządzenie do zarządzania ryzykiem informacji z aplikacji
SG11201707022PA (en) Risk information distribution device and risk information distribution method
PL3477319T3 (pl) Urządzenie i sposób do zarządzania akumulatorem
SG11201801335SA (en) Information processing method and device
SG11201701115YA (en) Method and apparatus for managing background application
SG11201600223UA (en) Information processing device and method
SG11201601366PA (en) Information processing device and information processing method
EP3128422A4 (en) Application scaling management method and apparatus
EP3197095A4 (en) Computer device and configuration management method thereof
IL255606B (en) System and method for managing work flow in isolated systems
SG11201707075SA (en) Deduplication method and storage device
SG11201606468XA (en) Device for providing electric-moving-body information and method for providing electric-moving-body information
EP3244569A4 (en) Asset information management method and device
EP3089039A4 (en) Cache management method and device
SG11201703302XA (en) Inventory management system and method of use
SG11201704922PA (en) Information push method and device
EP3251917A4 (en) Train information management device and train information management method
PL3116419T3 (pl) Urządzenie do mikrodermabrazji i sposób mikrodermabrazji
EP3271842A4 (en) Method of managing personal health information and device thereof
SG11201701227VA (en) System and method for management of payee information
PL3285180T3 (pl) Sposób i urządzenie do zapewniania zgodności między domenami czasu w systemie rozproszonym
GB201810405D0 (en) System and method for point of care identification of gaps in care
EP3280240A4 (en) Information management device and information management method
GB2551008B (en) Management system and method thereof
SG11201610723SA (en) Information processing method and information processing device