公开(公告)号：GB2519882B

公开(公告)日：2015-10-21

申请号：GB201501410

申请日：2013-09-20

Applicant: IBM

Inventor： TRIPP OMER ,  SALTZMAN ROI ,  HAY ROEE ,  KALMAN DANIEL

IPC: G06F21/51 ,  G06F21/56

Abstract: A first application being presented for installation on a processing system can be detected. The first application can be scanned, via a static analysis, to determine whether a user interface layout of the first application is suspiciously similar to a user interface layout of a second application installed on the processing system. If the static analysis is indeterminate, a runtime analysis of the first application can determine whether the interface layout implemented by the first application is suspiciously similar to the user interface layout of the second application. If the user interface layout implemented by the first application is suspiciously similar to the user interface layout of the second application installed on the processing system, the first application can be identified as being unsafe.

公开(公告)号：GB2519882A

公开(公告)日：2015-05-06

申请号：GB201501410

申请日：2013-09-20

Applicant: IBM

Inventor： TRIPP OMER ,  SALTZMAN ROI ,  HAY ROEE ,  KALMAN DANIEL

IPC: G06F21/51 ,  G06F21/56

Abstract: Identifying whether a first application is malicious. The first application can be presented for installation on a processing system. The first application can be scanned, via a static analysis implemented by a processor, to determine whether a user interface layout of the first application is suspiciously similar to a user interface layout of a second application installed on the processing system. When the user interface layout of the first application is suspiciously similar to the user interface layout of the second application installed on the processing system, an alert can be generated indicating that the first application is malicious.