SYSTEM AND METHOD FOR ANALYZING MOBILE CYBER INCIDENT

摘要

A system and method for analyzing mobile cyber incidents that checks whether codes attacking the weaknesses of mobile users are inserted into collected URLs and whether applications are downloaded and automatically executed, without the agreement of users, so that if the mobile cyber incidents are analyzed through the manual analysis of a manager, the applications to be analyzed manually can be reduced.

主权项

1. A system for analyzing mobile cyber incidents, the system comprising:
a mobile incident collection server collecting text messages sent through communication company servers to produce text message detection information, collecting URL information based on real-time search words provided by search portals to produce URL detection information, and collecting basic information of application files being sold in application market servers to produce APK detection information; a mobile incident analysis server having a URL analysis module checking whether codes attacking the weaknesses of mobile users are inserted into collected URLs or checking whether applications are downloaded and automatically executed, without the agreement of users, on the basis of the URL detection information collected by the mobile incident collection server to produce and provide URL analysis information and an application analysis module determining whether malicious behaviors exist on the basis of the APK detection information collected by the mobile incident collection server to produce and provide application analysis information; and an analysis information DB receiving the URL analysis information and the application analysis information produced by the mobile incident analysis server and storing and managing the information therein.