US 12,406,089 B2
Detection method and apparatus, and non-transitory computer readable storage medium
Min Zhou, Beijing (CN)
Assigned to BEIJING WODONG TIANJUN INFORMATION TECHNOLOGY CO., LTD., Beijing (CN); and BEIJING JINGDONG CENTURY TRADING CO., LTD., Beijing (CN)
Appl. No. 18/043,702
Filed by BEIJING WODONG TIANJUN INFORMATION TECHNOLOGY CO., LTD., Beijing (CN); and BEIJING JINGDONG CENTURY TRADING CO., LTD., Beijing (CN)
PCT Filed Sep. 14, 2021, PCT No. PCT/CN2021/118159
§ 371(c)(1), (2) Date Mar. 1, 2023,
PCT Pub. No. WO2022/062958, PCT Pub. Date Mar. 31, 2022.
Claims priority of application No. 202011009152.X (CN), filed on Sep. 23, 2020.
Prior Publication US 2023/0267228 A1, Aug. 24, 2023
Int. Cl. G06F 21/62 (2013.01); G06F 21/56 (2013.01); G06F 21/57 (2013.01); G06F 21/64 (2013.01)
CPC G06F 21/6245 (2013.01) [G06F 21/566 (2013.01); G06F 21/577 (2013.01); G06F 21/6227 (2013.01); G06F 21/64 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A detection method, comprising:
performing static taint analysis on an application to be detected to obtain at least one static taint propagation path, each static taint propagation path comprising a source interface identification and a destination interface identification;
performing, according to permission-related information of at least one privacy-related interface, permission-related information of at least one third-party software development kit (SDK), and the at least one static taint propagation path, static analysis on the application to be detected to obtain a static analysis result;
performing dynamic behavior analysis on the application to be detected to obtain a dynamic behavior analysis result;
acquiring communication flow data in an entire lifetime of the application to be detected, the communication flow data comprising a communication uniform resource locator (URL) and a communication data packet;
determining, according to the communication data packet corresponding to the communication URL, sensitive information and a sensitive information category that correspond to the communication URL, as a flow analysis result; and
fusing the static analysis result, the dynamic behavior analysis result, and the flow analysis result to obtain a detection result.