Packet-level dynamic mail attachment virus detection method

A dynamic detection and data packet technology, applied in the field of email virus detection, can solve the problems of increasing virus delay, reducing memory utilization, and reducing work efficiency, so as to improve utilization, improve memory utilization, and reduce delay. Effect

Active Publication Date: 2010-07-28
BEIJING ANTIY NETWORK SAFETY TECH CO LTD
View PDF2 Cites 10 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0008] 1. Occupy a large capacity buffer to store the attachments to be detected, reducing the utilization rate of memory;
[0009] 2. Only after receiving all attachment information can decoding and detection be performed, which increases the delay in detecting viruses and reduces work efficiency;

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Packet-level dynamic mail attachment virus detection method
  • Packet-level dynamic mail attachment virus detection method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0023] The technical solutions and technical effects of the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

[0024] A method for dynamically detecting email attachment viruses at the level of data packets described in the present invention is as follows: figure 1 shown, including the following steps:

[0025] Step 101 judges whether the received data packet contains attachment information: after receiving a data packet, judge whether it contains attachment information according to its MIME header information; if it contains attachment information, decode the attachment information. The content-disposition (Content-Disposition) field in the MIME header information is used to specify the way the mail reader processes the data content. There are two standard ways: inline and attachment: inline means direct processing; attachment means processing as an attachment.

[0026] In this step, if Content-Disposition ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a packet-level dynamic mail attachment virus detection method and relates to website security technical field. The method includes that: the received packet is judged if containing attachment information; the encoding mode of the attachment information is checked; the packet is judged if the packet is the end part of the mail; the packet is processed according to the relationship of decoded attachment information length and the preset threshold. The packet-level dynamic mail attachment virus detection method can improve the internal memory utilization rate and the virus detection efficiency.

Description

technical field [0001] The invention relates to the field of email virus detection, in particular to a method for dynamically detecting email attachment viruses at the level of data packets. Background technique [0002] With the development and popularization of the Internet, email plays an increasingly important role in people's work and life, and has become one of the most important network tools in modern interpersonal communication. But at the same time, e-mail viruses are also becoming more and more rampant, which can cause users' computer systems to be paralyzed, or cause user data to be leaked or destroyed. [0003] The Simple Mail Transfer Protocol (SMTP) is an Internet mail transfer protocol widely used at present. But SMTP is a relatively simple protocol based on pure ASCII text, and does not allow characters outside the ASCII character set to be used in mail messages. Therefore, some non-English character set messages and non-text information such as binary fil...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06Q10/00H04L12/58G06Q10/10
Inventor 童志明张栗伟肖新光
Owner BEIJING ANTIY NETWORK SAFETY TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products