作者: Yang Zeng , Huaguo Shi , Yaowei Chen , Wei Yang , Yu Lin
DOI:
关键词:
摘要: The present disclosure provides a method and system for monitoring an application. comprises creating simulated service; establishing connection with function in device driver that manages Input/Output (I/O) channel of the device; intercepting data transmitted from application to I/O replacing, based on intercepted data, service requested by corresponding recording request received forwarding analysis module analysis. is advantageous during Binder communication process layer used analyzing behavior features Android operating system. In contrast other blocking techniques, according do not disturb normal operation