Heuristic script detection method and system based on structured exception

A structured and heuristic technology, applied in the direction of platform integrity maintenance, etc., can solve problems such as undetectable structured abnormal scripts

Inactive Publication Date: 2015-10-14
HARBIN ANTIY TECH
View PDF4 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Through the method of the present invention, the problem of being unable to detect structured abnormal scripts in the prior art can be solved, aiming at the script file code structure, identifying its abnormal layout and invalid elements, and judging whether the script is malicious

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Heuristic script detection method and system based on structured exception
  • Heuristic script detection method and system based on structured exception

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0024] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, and to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the technical solutions in the present invention will be further detailed below in conjunction with the accompanying drawings illustrate.

[0025] The present invention forms a set of script heuristic detection method based on structured abnormality aiming at the above problems. The method of the invention can solve the problem that the structured abnormal script cannot be detected in the prior art, and can identify the abnormal layout and invalid elements according to the code structure of the script file, and judge whether the script is malicious.

[0026] A heuristic script detection method based on structured anomalies, such as figure 1 shown, including:

[0027] S101: Read the script code to be detected; ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a heuristic script detection method and system based on structured exception. The method comprises the following steps: reading a script code to be detected; carrying out structured scanning on the script code, and determining a code structure of the script code; according to a structured exception rule, matching the code structure of the script code, confirming that the code structure of the script code to be detected is exceptional if the code structure is successfully matched, and giving an alarm; and otherwise, confirming that the code structure of the script code to be detected is normal. The invention also provides a corresponding detection system. Through the method and the system provided by the invention, the scripts subjected to the structured exception can be quickly and effectively found, and a user can be given an alarm. The scheme can effectively make up deficiencies in a traditional detection method, and detects the scripts subjected to malicious deformation or the codes subjected to the structured exception.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to a heuristic script detection method and system based on structured anomalies. Background technique [0002] Traditional script detection methods are usually based on signature detection, which uses the malicious code part as a feature for matching detection. Malicious code authors usually use structured and abnormal coding methods to evade the detection of anti-virus workers. Traditional script detection methods usually have disadvantages for some deformed malicious codes and script codes with abnormal structure, such as abnormal code layout and invalid elements. Very weak detection capability. Contents of the invention [0003] The present invention forms a set of script heuristic detection method based on structured abnormality aiming at the above problems. The method of the invention can solve the problem that the structured abnormal script cannot be dete...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
Inventor 童志明沈长伟张栗伟
Owner HARBIN ANTIY TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap