Safety scanning method and device of downloaded file

Abstract

The invention relates to a safety scanning method and device of a downloaded file. The safety scanning method comprises the steps that when it is monitored that the file is downloaded, the content of the downloaded file is obtained and scanned, and file feature information corresponding to the content of the file is obtained; a preset local feature information library is inquired, whether the file feature information corresponding to the file content is matched with information items stored in the local feature information library is judged according to preset rules; the safety grade of the downloaded file is determined according to the matching result. The safety scanning method can detect malicious information like fishing information contained in the file, thereby avoiding missed judgment of malicious files, and improving accuracy of judgment.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a security scanning method and device for downloaded files. Background technique [0002] With the rapid development of the Internet, more and more users use the Internet to download and transmit files, and the wide application of the Internet makes the ways and means for users to obtain information more diverse. However, while the Internet brings convenience, it also brings opportunities for network hackers who develop malicious programs. Therefore, files downloaded from the Internet often become carriers of malicious programs. These malicious programs either attack the user's computer, causing the computer to be poisoned and paralyzed; [0003] At present, when a file downloaded from the Internet is scanned, simple features such as the file name or URL address of the file are often scanned, and whether the file is safe is judged by these simple features. However...

AI Technical Summary

Problems solved by technology

However, such a judgment method can only identify a small part of dangerous files, which can easily lead to missed judgments. The specific reason is that in actual situations, many files have normal file names and normal URL addresses, but their contents contain The content of phishing files; moreover, some files are transmitted through online chat tools, and these files may not have URL addresses, and it is difficult to judge the security of such files through the above-mentioned simple features

Images