Safety protection method and apparatus

Abstract

The present invention provides a safety protection method and apparatus. The safety protection method comprises the steps of: when a behavior of a process is matched with a preset local trigger strategy, uploading description information of the behavior of the process to a server so as to issue a temporary safety strategy corresponding to a preset risk behavior when the server determines that the behavior of the process is matched with any one preset risk behavior, wherein the temporary safety strategy comprises revocation conditions of the temporary safety strategy, and processing operations for dealing with the preset risk behavior and trigger conditions thereof; receiving the temporary safety strategy from the server; and loading the temporary safety strategy so as to execute the corresponding processing operation when any one of the trigger conditions is satisfied and revoke the temporary safety strategy when any one of the revocation conditions is satisfied. The problem of contradiction existing between user resource occupation and application validity for an existing safety strategy can be solved, and operation efficiency of safety protection software and user experience can be largely improved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a safety protection method and device. Background technique [0002] Malicious program is an umbrella term for any program of code deliberately created to perform unauthorized and often harmful behavior, such as computer viruses, backdoors, keyloggers, password stealers, macro viruses, boot sector viruses , script viruses, Trojan horses, crimeware, spyware, adware, and more. [0003] In order to cope with the huge and increasing number of malicious programs, existing security protection software can enhance the security protection capability against malicious programs by monitoring the behavior of application programs and monitoring and processing each behavior according to security policies. Among them, the security policy, as the core of the security protection capability, is usually updated, maintained and distributed by the server in the whole network. Of course, a unifie...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the defects in the prior art, the present invention provides a security protection method and device, which can solve the problem that existing security policies have contradictions between user resource occupation and application effectiveness

Images