Recognition method and device for secure file

Abstract

The embodiment of the invention provides a recognition method and device for a secure file. The recognition method comprises the steps that firstly, a known secure file matched with a file to be recognized is obtained according to the file to be recognized; secondly, the similarity of the file to be recognized and the known secure file is obtained; thirdly, whether the file to be recognized is the secure file is recognized according to the similarity of the file to be recognized and the known secure file. Accordingly, the recognition method and device for the secure file are used for solving the problem that in the prior art, the recognition rate of the secure file is low.

Description

【Technical field】

[0001] The invention relates to the technical field of network security, in particular to a security file identification method and device. 【Background technique】

[0002] With the rapid development of the Internet and communication technology in recent years, various applications are constantly appearing, and are updated iteratively and rapidly, and many application-related files are generated every day. Therefore, the security system will capture many unknown files, and these unknown files include both safe files and malicious files, so it is necessary to identify safe files from the numerous unknown files.

[0003] In the prior art, the data signature of the unknown file is used to search in the preset white list. If the unknown file belongs to the white list, it is recognized that the unknown file is a safe file, otherwise, it is recognized that the unknown file is a non-safe file. However, the speed of adding and updating applications is very fast, s...

Images