Research on security classification and evaluation methods of application programs

Abstract

In the existing research of Application security detection, mainly through the “APP self-check” function of the “risk self_x005fcheck” option group of the National Anti-Fraud Center APP(Application), the installed application in the mobile terminal and the stored
application installation self-check. The standard of application detection is limited to whether there are suspected fraud and malicious
programs, which leads to the lack of comprehensive security detection. To solve the above problems, this paper proposes a security detection
method for application programs, including: running at least one target application; Detect whether there is malicious behavior in the target
application program. If the malicious behavior occurs when the target application program is running, add the target application program to
the fi rst detection list; Detect the permission information of the target application program, if there is an unauthorized behavior, the target
application program is added to the second detection list; Detect all third party SDKS of the target application for the existence of third party
advertising SDKS, and if so, add the target application to the third detection list; Determine the risk level of the target application according
to the fi rst test list, the second test list and the third test list. This method solves the technical problem that the security detection of the
application program is not comprehensive.