Out-of-Domain Characteristic Based Hierarchical Emulator Detection for Mobile

More and more app service providers are threatened by mobile fraud. The malicious user uses the simulator to simulate multiple clients to cheat the server. The application of cloud computing and artificial intelligence technology makes this kind of fraud more difficult to detect. To avoid this threat, app service providers need to add detection functionality to the app to check if the app is running in the emulator. If so, the program will exit. Therefore, an effective method is needed to detect the emulator. Today's anti-emulator detection technology makes it more and more difficult to detect emulators. This paper presents a hierarchical out-of-domain characteristic detection, namely ODD, which can detect simulators from the perspective of architecture including OS layer, hypervisor layer and hardware layer. This method not only detects from multiple dimensions, reducing the probability of simulator detection failure, but also avoids some anti-simulator detection attacks. The experimental results show that many emulators can be detected effectively, and the performance will not be too expensive.