Method and device for identifying security attributes of application programs

Abstract

The embodiment of the invention provides a reliable method and device for identifying security attributes of application programs. The device comprises a feature file receiving module, a judging module, a second service end identifying module and a reference database identifying module, wherein the feature file receiving module is suitable for receiving feature files of the application program submitted by a terminal; the judging module is suitable for judging whether a second service end can be connected or not in current, if so, the second service end identifying module is executed, and if not, the reference database identifying module is executed; the second service end identifying module is suitable for acquiring the security attributes corresponding to the application program according to the feature files through accessing the second service end; and the reference database identifying module is suitable for accessing a reference database preset at a first service end, and acquiring the security attributes corresponding to the application program according to the feature files. The reference database is preset by the following modules: a loading module and a storing module, wherein the loading module is suitable for accessing the second service end and loading the reference database; the storing module is suitable for storing the reference database at the first service end; and the reference database is updated by means of offline loading.

Description

technical field [0001] The present application relates to the technical field of the Internet, in particular to a security attribute identification method and device for application programs. Background technique [0002] Cloud is a metaphor for the Internet and the network. It represents the abstraction of the Internet and the underlying infrastructure. It can be roughly divided into public clouds and private clouds. [0003] A public cloud usually refers to a cloud that a third-party provider directly provides services to external users through its own infrastructure. As long as they are registered users and paid users, they can access the public cloud through the Internet to obtain corresponding network services, but they do not own cloud computing resources. [0004] A private cloud is placed in a private environment, such as an organization such as an enterprise or a government that establishes itself in a computer room, or is built by an operator but leased to a certa...

AI Technical Summary

Problems solved by technology

[0008] The problem in the above prior art is that the private library of the private cloud may not be perfect, especially when the private cloud has just been deployed, there may not be a program that the user requests to access in the private library, and it is impossible to judge whether to execute the program; Although manual judgment can be made, since managers are usually not familiar with the business and have no knowledge of these programs, it is impossible to reliably identify the security attributes of the file

Images