An embodiment of the invention provides a method and a device for detecting jail breaking plugins. The method comprises the following steps: reading the jail breaking plugins in an IOS system, and analyzing the jail breaking plugins to obtain characteristic elements corresponding to the jail breaking plugins; matching the characteristic elements based on a matching rule to obtain a matched resultof the jail breaking plugins; determining behaviors of the jail breaking plugins according to the matched result of the jail breaking plugins; or, sending the matched result of the jail breaking plugins to a server to determine the behaviors of the jail breaking plugins.