DETECTION DEVICE AND DETECTION METHOD FOR MALICIOUS ANDROID APPLICATION

摘要

The present invention relates to a detection device and a detection method for a malicious Android application and, more specifically, to a detection device and a detection method for a malicious Android application, which are capable of detecting a malicious application by extracting some of the elements of a Manifest file and a Dex file inside an application package file to calculate a degree of similarity with a malicious application pattern. According to the present invention, a malicious application can be detected by analyzing the structure of data related to the execution of an application even when a part of data in an application package file is changed or a malicious code is repackaged into a normal application package.