Detection method and apparatus, and non-transitory computer readable storage medium

A detection apparatus, comprising:

• a memory;
• and
• a processor coupled to the memory, the processor being configured to perform, based on instructions stored in the memory, the detection method comprising:
• performing static taint analysis on an application to be detected to obtain at least one static taint propagation path, each static taint propagation path comprising a source interface identification and a destination interface identification;
• performing, according to permission-related information of at least one privacy-related interface, permission-related information of at least one third-party software development kit (SDK), and the at least one static taint propagation path, static analysis on the application to be detected to obtain a static analysis result;
• performing dynamic behavior analysis on the application to be detected to obtain a dynamic behavior analysis result;
• acquiring communication flow data in an entire lifetime of the application to be detected, the communication flow data comprising a communication uniform resource locator (URL) and a communication data packet;
• determining, according to the communication data packet corresponding to the communication URL, sensitive information and a sensitive information category that correspond to the communication URL, as a flow analysis result;
• and
• fusing the static analysis result, the dynamic behavior analysis result, and the flow analysis result to obtain a detection result.

A non-transitory computer readable storage medium having thereon stored computer program instructions which, when executed by a processor, implement the detection method comprising:

• performing static taint analysis on an application to be detected to obtain at least one static taint propagation path, each static taint propagation path comprising a source interface identification and a destination interface identification;
• performing, according to permission-related information of at least one privacy-related interface, permission-related information of at least one third-party software development kit (SDK), and the at least one static taint propagation path, static analysis on the application to be detected to obtain a static analysis result;
• performing dynamic behavior analysis on the application to be detected to obtain a dynamic behavior analysis result;
• acquiring communication flow data in an entire lifetime of the application to be detected, the communication flow data comprising a communication uniform resource locator (URL) and a communication data packet;
• determining, according to the communication data packet corresponding to the communication URL, sensitive information and a sensitive information category that correspond to the communication URL, as a flow analysis result;
• and
• fusing the static analysis result, the dynamic behavior analysis result, and the flow analysis result to obtain a detection result.