Method and equipment for judging whether software contains viruses or not on basis of behaviors

A technology of software and behavior, applied in the computer field, can solve the problems of expanding the scope of virus transmission and harm, the inability to detect and kill new viruses as soon as possible, and the inability to judge the unknown virus of the software to be detected, so as to achieve the effect of avoiding the scope and possible harm

Inactive Publication Date: 2012-07-11
联信摩贝软件(北京)有限公司
View PDF4 Cites 14 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] The above-mentioned scanning method based on the virus signature code can only judge whether the software to be detected is infected with a known virus, but it cannot judge whether there is an

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and equipment for judging whether software contains viruses or not on basis of behaviors
  • Method and equipment for judging whether software contains viruses or not on basis of behaviors
  • Method and equipment for judging whether software contains viruses or not on basis of behaviors

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0031] Below in conjunction with accompanying drawing the present invention is introduced in detail:

[0032] Such as figure 1 As shown, it is a schematic flowchart of a method for judging whether software contains a virus based on behavior provided by an embodiment of the present invention, including the following steps:

[0033] S1, obtaining more than one sensitive behavior information of the software to be detected;

[0034] Among them, the sensitive behavior information specifically refers to the operation information that the software to be detected has automatically executed or will automatically execute. Specific operation methods include but are not limited to: the software to be tested automatically runs in the background, the software to be tested is automatically started, the software to be tested uses a name or identifier that does not conform to common practice during installation and operation, the software to be tested The detection software is automatically ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a method and equipment for judging whether software contains viruses or not on the basis of behaviors. The method includes the following steps of S1, acquiring at least one kind of sensitive behavior information of a to-be-detected software; S2, setting corresponding weights for the acquired sensitive behavior information; S3, comprehensively computing the weights acquired in the S2 according to preset algorithm, and obtaining a total weight value; and S4, determining the probability of the to-be-detected software containing the viruses according to the total weight value. The method and the equipment for judging whether the software contains viruses or not on the basis of behaviors determine the virus containing probability of the to-be-detected software by analyzing executed or possibly-executed sensitive behaviors of the software, and thereby, viruses searched are not only limited to the known viruses in virus bases but include unknown viruses, and software users can find viruses contained in the software in time so that spreading of the virus transmission range and possible damages are avoided.

Description

technical field [0001] The invention belongs to the technical field of computers, and in particular relates to a method and equipment for judging whether software contains viruses based on behavior. Background technique [0002] Malicious codes in software usually mean viruses in software. When a virus is contained in software, it will not only hinder the normal operation of the software, but also bring a lot of harm to the operating system where the software is installed. Therefore, during software installation or use, , It is necessary to scan the software frequently to determine whether the software contains viruses. [0003] In the prior art, the method for judging whether the software contains a virus is as follows: anti-virus researchers extract the virus signature codes from the existing various virus sample information that they have mastered, and then compose various virus signature codes into a virus database; When a certain software to be detected is scanned, it ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/00G06F21/56
Inventor 高勐勐
Owner 联信摩贝软件(北京)有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap