Cloud detection and killing method and system based on adaptive classifier

Abstract

The invention provides a cloud searching and killing method and system based on a self-adaption classifier. The cloud searching and killing method comprises the steps that a client can carry out classification detection on files based on hamming distance classifier, the client sends the files to a cloud terminal when the characteristics of the files are not successfully matched with characteristics in a lightweight class blacklist and whitelist characteristic base, the cloud terminal can carry out classification detection on the files based on a hash classifier with at least two levels of hamming distances, and the cloud terminal can send the files with the hit rate ranking in the preset range at the preset time interval based on the hit rate of the statistic file characteristics when the file characteristics are successfully matched with characteristics in the blacklist and whitelist characteristic base of the cloud terminal. Meanwhile, the hamming distance classifier an finish self-adaption updating. By means of the cloud searching and killing method and system based on the self-adaption classifier, the filtering rate and the hit rate of the file characteristics are improved, the data sent to the cloud terminal from the client are reduced, meanwhile the searching distance of the file characteristics in the cloud terminal is shortened, and the characteristic searching efficiency is improved.

Description

technical field [0001] The present invention relates to the technical field of cloud security, and more specifically, to a method and system for searching and killing a cloud based on an adaptive classifier. Background technique [0002] Cloud security is the latest embodiment of information security in the Internet age, and cloud security technology is the result of the mixed development and natural evolution of distributed computing technologies such as P2P technology, network technology, and cloud computing technology. Since the feature library stored in the cloud can be much larger than the original hardware device, using cloud security technology to transfer the feature library to the cloud can reduce the memory cost of the device, and at the same time, using the high-performance processing capabilities of the cloud, transferring the security scan to the cloud can also Reduce the impact of security scans on hardware device performance. It is precisely because cloud sec...

AI Technical Summary

Problems solved by technology

[0010] In view of the above problems, the purpose of the present invention is to provide a cloud scanning method and system based on an adaptive classifier to solve the problem of large resource occupation and loss in the cloud of the existing hardware-based two-level black and white list mechanism, and the The filtering efficiency of the client and the matching hit rate of the feature library are low

Images