Method and device for detecting malicious code in an intelligent terminal

Abstract

The present invention discloses a method and device for detecting malicious code in an intelligent terminal. The method comprises: acquiring a virtual machine executable file of an application from an application layer of an intelligent terminal operating system; decompiling the virtual machine executable file to obtain a decompiled function information structure; parsing the decompiled function information structure to extract a function calling sequence in the decompiled function information structure; matching the function calling sequence using a preset malicious code feature library; if matching succeeds, determining that the virtual machine executable file of the application contains malicious code. By applying the solution of the present invention, through a virtual machine executable file of the application, it may be analyzed and determined whether the application comprises malicious code, such that a tampered application program or a malicious software may be detected and removed, thereby protecting security of the intelligent terminal.

Dependencies are inferred from the claim text.