System and method for searching and killing malicious codes based on expandable mode

Abstract

The invention discloses a system for searching and killing malicious codes based on an expandable mode. The system comprises a function component, a script component and an engine object, wherein the function component comprises a function module for implementing a malicious code processing strategy and supplies a lead-out interface for the function module; the script component comprises a processing script for implementing the malicious code processing strategy and supplies a calling interface for the processing script; the processing script calls the processing strategy corresponding to the function module through the lead-out interface of the function component; and the engine object manages and schedules the function component and the script component, executes the processing script in the script component, implements the malicious code processing strategy and finish searching and killing of the malicious codes. The invention also discloses a method for searching and killing the malicious codes based on the expandable mode. By the method and the system, according to the popular malicious codes of new varieties or new families, a searching and killing scheme can be formed at the first time and is easy to add, delete, expand and maintain; extra development and manual expense are avoided; and processing, searching and killing for the malicious codes are greatly facilitated.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a system and method for checking and killing malicious codes based on an extensible pattern. Background technique [0002] With the release of a large number of malicious code source codes, the increasing "popularity" of automatic virus generators, and malicious remote control software and some hacking tools, it is easier to get started and operate the production and use of malicious codes, and the technical threshold is getting higher and higher. In addition, the underground economic operation of malicious codes is becoming more and more "mature", so that malicious code technology no longer belongs to the private sector, but tends to develop in the direction of "professional technical teams"; illegal malicious code development and training websites on the Internet charge less and more Promoted the proliferation of malicious code. Based on the above reasons, there a...

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a system and method for checking and killing malicious codes based on an extensible mode, which solves the deficiency and hysteresis of the current general checking and killing methods for malicious codes

Images