Method and system for document security operation and analysis against overflow attack

Abstract

The invention provides an anti-overflow-attack document security operation and analysis method and system. Firstly public key and private key pairs required by encryption are initialized; an encryption one-way communication protocol for a terminal to transmit information to specified equipment and an encryption one-way communication protocol for the specified equipment to transmit the information to the terminal are established; then operation of the terminal on suspicious documents in the specified equipment and static and dynamic analysis of the specified equipment on the operation process of the suspicious documents are realized through the two encryption one-way protocols; and finally the characteristics of the data and the suspicious documents are collated and analyzed and uploaded to a protection mechanism. The suspicious documents are put in the specified equipment to be operated and analyzed so that system security of the terminal can be guaranteed, and the way of cross infection of malicious codes can be effectively blocked.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and system for document security operation and analysis against overflow attacks. Background technique [0002] With the development of network technology, the Internet has brought great convenience to people's life and work. However, due to the openness of the Internet, the form of network security has become increasingly severe. Cyber ​​attacks have evolved from a technology show-off to a conflict of interest. There have been many cyber hacker organizations of a certain scale in the world, using advanced persistent threats to carry out long-term intrusion, latent, and stealing of confidential information against governments, individual companies, etc. The attack methods are flexible and changeable, and the advanced concealment makes traditional defense methods unable to effectively defend against them. In some classic attack cases, it is found that many ...

AI Technical Summary

Problems solved by technology

[0006] 3. It is difficult for network administrators and system administrators to repair patches and vulnerabilities in the first time, and attackers use 0day vulnerabilities to make it impossible to effectively defend against document overflow attacks;

Images