Virus detection method and system

Abstract

The invention discloses a virus detection method and system. The method includes: creating a virus feature library, wherein virus features and virus information in the virus feature library are recorded according to the following relations that one piece of virus information includes one or more virus features and each virus feature corresponds to one or more pieces of virus information; after an acquired network data packet is restructured and analyzed, adopting a multi-pattern matching algorithm for matching the information with the virus features in the virus feature library, when one virus feature is matched, combining the matched virus features, judging whether one or more pieces of complete virus information can be formed or not, if yes, showing that the virus information succeeds in matching, and continuing judgment after waiting for new virus features matched next time otherwise. The method and system is capable of processing one virus including multiple virus features and suitable for being used in high-speed networks; through the storage mode of the virus information and virus features, viruses can be matched quickly and detected more efficiently.

Description

technical field [0001] The present invention relates to the field of communications, in particular to a virus detection method and system. Background technique [0002] Today, the rapid development of network technology makes the Internet play an increasingly important role in national economic production and people's daily life. At the same time, attacks such as intrusion into computer networks and computer systems inevitably become more and more , and the means used are becoming more and more complex and intelligent. In view of this, the issue of network security has been paid more and more attention by various countries and scholars, and has gradually become a research hotspot of various scientific research institutes and institutions. [0003] Network security is a comprehensive subject involving various fields such as computer, communication and mathematics. Initially, in order to prevent various network threats, traditional network security technologies are mainly ba...

AI Technical Summary

Problems solved by technology

However, in the current multi-pattern matching algorithm, the matching result only tells people which virus features are matched, but when a virus contains multiple virus features, it cannot tell people whether a certain virus is successfully matched.

Images