A computer virus identification method and system based on cloud computing

Abstract

The invention relates to the field of computer security, in particular to a computer virus identification method and system based on cloud computing. The method comprises that the cloud server receives detection information uploaded by the terminal, the detection information includes sample information and a terminal detection result, and the terminal detection result represents the virus identification result obtained by the terminal performing virus identification on the sample; the cloud server corresponds to the sample information Virus detection is performed on the samples of the cloud to obtain the cloud detection results; the terminal detection results are compared with the cloud detection results to determine whether the terminal detection results are consistent with the cloud detection results. If the terminal detection results are consistent with the cloud detection results, the cloud The server does not return content to the terminal. The present invention compares the terminal detection results with the cloud detection results by the cloud, which reduces the data processing pressure of the terminal. traffic consumption.

Description

technical field [0001] The invention relates to the field of computer security, in particular to a computer virus identification method and system based on cloud computing. Background technique [0002] With the development of Internet technology, virus files are also increasingly rampant, becoming a major threat to computer hardware or user data. For example, Internet malicious programs can spread through the network and run on electronic devices connected to the network (such as smart phones, tablet computers, portable computers, desktop computers, etc.), thereby stealing user information, destroying user data, pushing advertisements or Fraudulent information, and may also affect the operation of electronic equipment, endangering the software and hardware security of electronic equipment. [0003] Existing virus scanning processes are generally divided into local scanning and killing and cloud scanning and killing. Local detection and killing is to run the detection and ...

AI Technical Summary

Problems solved by technology

The packet return stage refers to: after the cloud receives the request, it performs cloud detection on the samples corresponding to the sample information to determine whether the sample files contain viruses, and then returns the sample information of all samples and the corresponding cloud detection results to the terminal. The sample information and the cloud detection results correct the terminal detection results, that is, compare the terminal detection results corresponding to each sample with the cloud detection results, and check the terminal detection results when the terminal detection results are inconsistent with the cloud detection results. Obviously, this This method will occupy more computing resources of the terminal, affect the operating efficiency of the terminal, and may reduce the user experience

[0005] In addition, the cloud returns all the cloud detection results and sample information of all samples requested by the terminal to the terminal, and the returned content includes key information such as the file name, certificate, and file size corresponding to each sample, as well as the risk name and risk type of the file , risk level, virus ID, detailed description of the virus, etc. Since the sample information and cloud detection results of each sample contain a lot of content, and the number of software installed on the terminal is large (for example, there are hundreds of built-in software in mobile phones), it is necessary to The data uploaded to the cloud and received back from the cloud is relatively large, which will consume a large amount of traffic during the cloud scanning and killing process

Images