Check patentability & draft patents in minutes with Patsnap Eureka AI!

Detection method and system of excel macro sheet virus

A virus and technology to be detected, applied in the direction of instruments, electronic digital data processing, platform integrity maintenance, etc., can solve the problem that macro table viruses cannot be normalized detection, to prevent false alarms, improve efficiency, and false alarm rate low effect

Inactive Publication Date: 2016-04-13
HARBIN ANTIY TECH
View PDF4 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] The present invention provides a detection method and system for excel macro table virus, which solves the problem that the macro table virus cannot be normalized detection

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Detection method and system of excel macro sheet virus
  • Detection method and system of excel macro sheet virus

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0025] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, and to make the above-mentioned objectives, features and advantages of the present invention more obvious and understandable, the technical solutions of the present invention will be further detailed in conjunction with the accompanying drawings. Description.

[0026] The invention provides a method and system for detecting an excel macro sheet virus, which solves the problem that the macro sheet virus cannot be normalized detection.

[0027] An excel macro sheet virus detection method, such as figure 1 Shown, including:

[0028] S101: Extract macrosheetsubstream stream data in the excel document to be detected;

[0029] According to the excel file format document provided by Microsoft, write the extraction program code by yourself, extract the workbook data stream, and then extract the possible macrosheetsubstream stream data; for some files tha...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a detection method and system of an excel macro sheet virus. The detection method comprises the following steps: extracting macro sheet substream data in an excel document to be detected; analyzing the macro sheet substream data, obtaining the information of all cells in the macro sheet, and extracting the formula command data of each cell; extracting token and formula length in each piece of formula command data; calculating the Hash values of all token and formula lengths; and traversing a malicious excel macro sheet virus feature library, matching with the Hash values, detecting that the excel document is malicious if matching is successful, and otherwise, detecting that the excel document is not malicious. Through the method, the excel macro sheet virus can be effectively detected, and a normalized detection method of the excel macro sheet virus is provided. Whether malicious codes are in the presence in an excel macro sheet can be quickly judged, and an amount of features can be effectively reduced.

Description

Technical field [0001] The invention relates to the technical field of computer network security, in particular to a method and system for detecting an excel macro sheet virus. Background technique [0002] At present, excel macro viruses generally come in two forms, one is to insert ordinary macro codes into excel to implement malicious functions, and the other is to use excel macro tables to insert malicious codes to implement malicious functions. Although the functions of these two forms are similar, the forms of malicious data saved in excel are completely different. Therefore, the existing method of detecting file macro codes cannot detect the macro codes added in the macro table. Inserting the MSExcel4.0 macro table in excel, using the macro table to insert malicious code, is by adding red codes to the cells of the macro table and adding them row by row along the same column. The RETURN function can be executed sequentially during code execution. Therefore, many malicious ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
CPCG06F21/562
Inventor 童志明苏培旺何公道
Owner HARBIN ANTIY TECH
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2025 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com