Method and system for monitoring application program of mobile device

A system for monitoring an application in a mobile device, comprising a client installed in the mobile device, the client comprising a simulated system service module, a function hook module, a proxy service module, an analysis module and a user rule database, wherein:

• the simulated system service module corresponds to a system service module in an operating system of the mobile device;
• the function hook module, communicative with a kernel of the operating system of the mobile device, establishes a connection with a function in a device driver that manages an Input/Output (I/O) channel of the mobile device, intercepts data transmitted from the application to the function in the device driver that manages the I/O channel of the mobile device, and forwards, based on the intercepted data, a system service requested by the application to the corresponding simulated system service module;
• the proxy service module, communicative with the simulated system service module, communicates between a service at a system layer and a service at an application layer and converts the request recorded by the simulated system service at the system layer into a request visible at the application layer;
• and
• the analysis module, communicative with the proxy service module and the user rule database, reads an operation requested by the application, and authorizes or prohibits the operation requested by the application based on a rule stored in the user rule database or based on a selection by a user in response to a prompt presented on a screen of the mobile device.