Back to results
US 2019/0377874 A1Published application
Grouping application components for classification and malware detection
AssigneePalo Alto Networks, Inc.
InventorsZhi Xu, Zihang Xiao
Life of this patent
Estimating the term…
Abstract
A mobile application is received. Each of a plurality of libraries associated with the mobile application is categorized using a set of library group categorizations including a common group and an uncommon group. An analysis of correlation using the categorized libraries is performed. A determination that the mobile application is similar to another mobile application is determined based on the analysis.
Claims20
A system, comprising:
- a memory;
- and
- a processor, coupled to the memory, wherein the memory is configured to provide the processor with instructions, and wherein the processor is configured to:
- receive a mobile application;
- categorize each of a plurality of libraries associated with the mobile application using a set of library group categorizations including a common group and an uncommon group;
- perform an analysis of correlation using the categorized libraries;
- and
- determine that the mobile application is similar to another mobile application based on the analysis.
5 more elements
A method, comprising:
- receiving a mobile application;
- categorizing each of a plurality of libraries associated with the mobile application using a set of library group categorizations including a common group and an uncommon group;
- performing an analysis of correlation using the categorized libraries;
- and
- determining that the mobile application is similar to another mobile application based on the analysis.
2 more elements
A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
- receiving a mobile application;
- categorizing each of a plurality of libraries associated with the mobile application using a set of library group categorizations including a common group and an uncommon group;
- performing an analysis of correlation using the categorized libraries;
- and
- determining that the mobile application is similar to another mobile application based on the analysis.
2 more elements
Dependencies are inferred from the claim text.