Abstract:

Aiming at the increasing attacks to intelligent mobile terminals,MHP (mobile honeypot)is proposed to decoy,capture and analyze malwares. MHP contains three kernel modules: the decoy module creates fraudulent environment, the malicious behavior capture module catches malicious behaviors through monitoring communication port, scanning system memory and identifying sensitive permissions and the malicious data analyzing module indentifies the types of security threats. Results show that MHP can capture malicious behavior effectively and is suitable for deploying on mobile terminals.

Key words: malicious behavior, mobile honeypot, fraudulent environment, behaviors intercept