System and method of termination of a functionally-limited application interrelated with a website and started without installation
AssigneeAO Kaspersky Lab
InventorsVictor V. Yablokov, Anton S. Samoylov, Alexander Y. Shindin
Life of this patent
Estimating the term…
Abstract
Systems and methods for limiting applications launched without installation for the presence of malicious code. Applications launched without installation and which contain malicious code can be stopped or paused. Relationships between a fully-functional website-related application requiring installation and a functionally-restricted application launched without installation can be used to determine malicious code.
Claims20
A system for detecting malicious code for a functionally-restricted website-related application launched without installation on a mobile device, the system comprising:
- a computing platform including computing hardware of at least one processor and memory operably coupled to the at least one processor;
- instructions that, when executed on the computing platform, cause the computing platform to implement:
- a detection tool configured to—
- detect activity of an operating system (OS) service related to the functionally-restricted website-related application launched without installation, and
- determine at least one parameter of the functionally-restricted website-related application launched without installation;
- a determination tool configured to—
- receive the at least one parameter of the functionally-restricted website-related application launched without installation from the detection tool, and
- determine a corresponding fully-functional application requiring installation based on the at least one parameter of the functionally-restricted website-related application launched without installation;
- a check tool configured to—
- receive information about the corresponding fully-functional application requiring installation from the determination tool,
- check for malicious code in the corresponding fully-functional application requiring installation from the determination tool based on the information received from the determination tool, and
- stop the launch of the functionally-restricted website-related application when the check for malicious code identifies malicious code.
A method for detecting malicious code for a functionally-restricted website-related application launched without installation on a mobile device, the method comprising:
- detecting launch of the functionally-restricted website-related application;
- determining at least one parameter of the functionally-restricted website-related application launched without installation;
- determining a corresponding fully-functional application requiring installation based on the at least one parameter of the functionally-restricted website-related application launched without installation;
- checking for malicious code in the corresponding fully-functional application requiring installation;
- and
- stopping the launch of the functionally-restricted website-related application.
A method of suspending a functionally-restricted website-related application launched without installation on a mobile device, the method comprising:
- detecting launch of the functionally-restricted website-related application on the mobile device;
- pausing the functionally-restricted website-related application;
- determining at least one characteristic of the functionally-restricted website-related application;
- resuming the functionally-restricted website-related application based on the determined at least one characteristic.
Dependencies are inferred from the claim text.