智能手机的广泛应用导致手机恶意软件的数量急速增加，尤其是近几年，基于Android操作系统的手机在智能手机市场占据主导地位，针对Android系统的恶意软件数量快速增加。手机恶意软件主要收集手机用户地理位置、语音通信、短信等个人隐私信息，或进行恶意扣费、耗费系统资源等行为，给用户自身和手机系统带来很大危害。准确分析恶意软件行为特征可以为后续清除恶意软件提供有力依据。传统的恶意软件分析技术主要包括静态分析与动态分析，文中介绍了当前存在的一些手机恶意软件分析检测技术及其缺陷，并从安装、激活、恶意负载三方面对已知Android恶意软件主要行为特征进行详细分析。%The wide use of smart phones results in a sharp increase in the number of phone malicious code,especially in recent years, phone with Android operating system dominates the smartphone market,malicious code to the Android system increases rapidly. Malicious software on mobile phones mainly collects personal privacy information such as user location,telephone calls,text messages and so on, those software may also engage in malicious payment,costing of system resources,bringing great harm to the user and cell phone system. Accurate analysis of malware behavior characteristics can provide powerful basis for the subsequent removal of malicious software. Tradi-tional malware analysis techniques include static analysis and dynamic analysis,some analysis and detection technology and its defects are introduced,analyzing the main behavior characteristic of existing Android malware from three sides,inclusive of the installation,activation and malicious load in detail.
展开▼
