System and method for detection and recovery of malfunction in mobile devices

摘要

A method for recovering malfunction of at least one resource of a mobile device in response to a malware attack and a mobile device thereof. The method comprises diagnosing at least one malfunction of at least one resource of the mobile device without identifying a reason of the attack, and, in response to said diagnosing, recovering at least one resource of the mobile device. The mobile device comprises one or more resources operatively coupled to at least one sensor directly or indirectly coupled to a recovery block, wherein said sensor is configured to monitor at least one of said resources for information, possibly indicative of at least one affected resource, and to report, directly or indirectly this information and/or derivative thereof to the recovery block; and said recovery block is configured to initiate at least one recovery-related action in respect of at least one of said resources in case the received information and/or derivative thereof meets a certain criterion.

主权项

1. A method of recovering from a malfunction of at least one resource of a mobile device in response to a malware attack, the mobile device including a processor, the at least one resource being coupled to at least one sensor, the at least one sensor being coupled to a fault analysis block and to the processor, the fault analysis block being coupled with the recovery block, the method comprising the procedures of:
monitoring by said at least one sensor said at least one resource for information possibly indicative of an affected said at least one resource from said malware attack, said monitoring including at least periodically sensing operation of said at least one resource, in anticipation of receiving signals from respective said at least one resource within a set time period; determining whether said information meets at least one criterion of a suspicious event possibly indicative of malfunction of said at least one resource; diagnosing said suspicious event by said fault analysis block to determine whether said suspicious event is to be identified as a malfunction event of said at least one resource; and initiating at least one recovery-related action in an escalating extent by said recovery block, according to at least one of the following criteria: said suspicious event is identified as said malfunction event, and failure to receive said signals within said set period of time.