Computer information safe method

Abstract

The invention relates to a method of the computer information security, and comprises the following steps that: firstly, journal log is carried out to a system; secondly, whether a program behavior relates to a protected file is judged, if yes, the running is prohibited or limited according to protection rules, if no, whether a sensitive file which tries to modify the system security exists is judged; thirdly, if the sensitive file which tries to modify the system security does not exist, the step two is continuously run; fourthly, if the sensitive file which tries to modify the system security exists, an automatic backup of the original document is started, and the fifth step is carried out, if the sensitive file which tries to modify the system security does not exist, the step two is repeated; fifthly, the sensitive file of the system security is allowed to be modified; sixthly, a vicious procedure is analyzed and recognized through a running journal log created in the first step; seventhly, if the vicious procedure is an illegal program, the illegal program is deleted, and the eighth step is carried out, if the vicious procedure is not the illegal program, the step two is repeated; eighthly, a restoration is carried out through the running track of the illegal program.

Description

technical field [0001] The invention relates to an information security technology, in particular to a computer information security method. Background technique [0002] There are many types of computer security products available, but they can be roughly divided into three categories in terms of design schemes: antivirus software, firewalls, and security vulnerability assessment and security services. The anti-virus software mainly prevents and removes viruses, Trojan horses, worm files and infected system settings on the hard disk of the client machine, and restores the original non-toxic state; the firewall mainly filters and blocks files that do not meet the preset settings on the network by setting network data packet filtering rules. A user-configurable filter switch is implemented on the network for packets of specified rules. Security vulnerability assessment and security services are to conduct security assessment on a security object (network or stand-alone machi...

AI Technical Summary

Problems solved by technology

In order to avoid false negatives as much as possible, it must perform "intensive analysis" (repeated frequent "analysis"), which obviously inevitably brings about the overhead of system efficiency

[0010] Finally there is the issue of user security

As already analyzed above, according to the design idea of ​​"actively defending against enemies outside the country's gates", "fish that slipped through the net" will move freely, which will undoubtedly bring hidden dangers to users' safety

Images