Huawei Technologies Co., Ltd. published a patent for “a detection method, device, and storage medium for malicious applications”, with the publication number CN112689835A
The company’s patent summary reveals that this method compares the configuration information of the operating system in the initial state and in the running state.
The compares the legal application information of the operating system with the application information to be detected.
Thereby Detecting the security of the application to be detected, and evaluating the malicious level of the application to be detected.
It can save a lot of computing and storage resources, improve detection efficiency, and still detect malicious applications that have changed code or use code obfuscation and shelling techniques.
(Via)