Method and system for preventing malicious codes from detecting virtual environments

Abstract

The invention provides a method and system for preventing malicious codes from detecting virtual environments. The method comprises the steps of obtaining and analyzing malicious code samples to obtain judging conditions for judging the virtual environments; extracting parameters or data and an API interface used in the judging conditions; and hooking the API, obtaining parameters or data in the virtual environments, judging whether the parameters or the data in the virtual environments are same as the parameters or the data used in the judging conditions or not one by one, if yes, randomly modifying or generating new parameters or data according to the format of the parameters or the data to replace the original parameters or data, triggering and executing the related malicious codes. The invention also provides the corresponding system structure. Through the method provided by the invention, the virtual environments can be effectively prevented from being detected by the malicious codes.

Description

technical field [0001] The invention relates to the field of computer network security, in particular to a method and system for preventing malicious code from detecting a virtual environment. Background technique [0002] With the development of computer technology, people's demand and dependence on computer information technology are becoming stronger and stronger. People's production and life are inseparable from computer technology. The widespread use of computers is also accompanied by computer security issues. Driven by interests or misguided values, some people take advantage of computer security loopholes to steal users' computer information through malicious programs, destroy computer systems, and cause economic losses to people. In order to prevent the worsening of this phenomenon, computer security personnel have developed a series of anti-virus software to detect malicious computer programs. In order to avoid the analysis and killing of anti-virus software or ...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the above problems, the present invention proposes a method and system for preventing malicious code from detecting a virtual environment, and solves the problem that the virtual environment cannot be detected due to malicious code identification

Images