Method and device for detecting macro virus of files

A detection method, macro virus technology, applied in computer security devices, instruments, electrical digital data processing, etc., can solve the problems of poor anti-virus effect, no ability to detect macro viruses, and difficulty keeping up with the speed of macro virus changes, etc. Achieve good anti-virus effect and improve detection ability

Inactive Publication Date: 2012-12-26
BEIJING QIHOO TECH CO LTD +1
View PDF4 Cites 19 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0006] However, due to the infection and outbreak of the macro virus first, the anti-virus comes later; and the macro language is a kind of script, which can produce variants with a slight modification, and can even modify itself during the propagation process, changing once every time it is propagated; therefore, the existing It is difficult for technology to keep up with the speed of macro virus changes, basically no ability to detect unknown macro viruses, and the anti-virus effect is poor

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for detecting macro virus of files
  • Method and device for detecting macro virus of files

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0060]In order to make the above objects, features and advantages of the embodiments of the present invention more comprehensible, the embodiments of the present invention will be further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0061] Existing technology relies on the characteristic code of macro virus to carry out the detection of macro virus, has certain detection ability for known macro virus; But, because macro virus infection, attack first, anti-virus after; And macro language is a kind of script, slightly Modifications can generate variants, and even modify itself during the transmission process, changing once every time it is transmitted; therefore, the existing technology is difficult to keep up with the speed of macro virus changes, basically has no detection ability for unknown macro viruses, and the anti-virus effect is poor .

[0062] In the embodiment of the present invention, the inventor foun...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention provides a method and a device for detecting macro virus of files, wherein the method comprises the steps of matching macro codes of the files to be detected with behavior codes in a code base, wherein the behavior codes are used for indicating the macro codes required by realizing fixed macro virus behavior; and judging whether the files to be detected are infected with the macro virus according to the matching result. The embodiment of the invention can improve the detection capability of the macro virus of the files.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of computer security, in particular to a method and device for detecting a file macro virus. Background technique [0002] A macro language is a class of programming languages ​​in which all or most computations are performed by expanding macros. Macro language is widely used in text processing programs and is mainly used to expand the functions of text processing programs. For example, Microsoft Office can use macro language to implement macro functions such as dynamic calculation of tables and design of interactive windows. However, virus creators may also take advantage of the powerful macro language and the advantages of simple development, and use it to develop macro viruses. [0003] A macro virus is a computer virus that resides in the macros of a document or template. Once such a document is opened, the macros in it will be executed, and the macro virus will be activated, ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/00
Inventor 禹建文
Owner BEIJING QIHOO TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap