SYSTEM AND METHOD FOR DETECTING MALICIOUS FILES ON MOBILE DEVICES Russian patent published in 2017 - IPC G06F21/56 

FIELD: information technology.

SUBSTANCE: system includes the means of analysis for identifying the classes and methods in the checked executable DEX file, identifying the bytecode for each method, determining specific instructions for each method by means of identifying the appropriate instruction opcode from the bytecode, transferring certain methods and instructions with the appropriate instruction opcode to the vectors-creating tool; the means for creating vectors for dividing all the instructions specific for each method into the functional groups that are pre-defined, counting the number of the instructions belonging to each functional group of the corresponding method, the presentation of each method in the form of a vector based on the number of instructions in said group, transferring the generated methods vectors into the comparator device; the comparator device for comparing the generated vectors of the scanned file methods with the vectors of malicious files and for drawing up the verdict about the maliciousness of the scanned file; the means of storing the malicious files methods vectors base.

EFFECT: prevention of committing malicious actions on mobile devices containing the Android operating system.

12 cl, 6 dwg, 2 tbl