Geek asks and answers

Determine if a Java application is malware

I am wondering what automatic methods can be used to determine if a Java application running on Windows or PC is malware. (I don’t even know what exploits are available for such an application. Is there a place where I can find out about the risks?) If I have the source code, are there specific packages or classes that can be used more malicious than others? Perhaps they can offer malware?

Refresh . Thanks for answers. I was interested to know if this is possible, and it basically sounds completely impracticable. Good to know.

+3
source share
3 answers

, , , " ".

, , , , - , /. , , ( , ), .

95% , 5%.

+4

, : ? , , , , , , . ?

, , , , . , . autoupdate. ( autoupdate ? , .)

, - , . , , .

, , . , , .

+2

, , Java. , Java "" ( ) , , , , mallware.

mallware , . , . , , , , ; - .

, , Java-API ; , Java . Java , , Java - "" (, ).

API-, , , Permission. java docs .

  • java - - , .

    JVM API; , ( -). , java, . , , java ( ).

    System.loadLibrary() System.load() Runtime.loadLibrary() Runtime.load(). VM .

  • ?

    java.io, java.net.

  • ( Runtime.exec())

    java.lang.Runtime.exec() ProcessBuilder.exec().

  • /?

JVM (/ , ) , (. Oracle) - , , , , , .

This is definitely not easy, and I was surprised to find how many places you need to look for (for example, several java functions load their own libraries, and not just one).

0
source

More articles:


All Articles