Relationship chain creation method, device, server, terminal, storage medium

Abstract

The embodiment of the present invention discloses a method, device, server, and terminal for creating a relationship chain, wherein the method includes: determining the target file in the terminal, and the target file refers to: In the detection process, the terminal file of the associated file cannot be detected; according to the target file, the common terminal set is determined, and the common terminals in the common terminal set all include the target file; the common terminal in the common terminal set is carried out File detection, determining a common file associated with the target file in the common terminal; according to the common file, creating a behavioral relationship chain about the target file, and recording the target on the behavioral relationship chain A file node of the file and a file node of the common file. This embodiment can better create a virus behavior relationship chain.

Description

technical field

[0001] The present invention relates to the field of computer technology, in particular to a relationship chain creation method, device, server, terminal, and storage medium. Background technique

[0002] A computer virus is a code inserted into a computer program by the compiler to destroy computer functions or data, a set of computer instructions or program codes that can affect the use of a computer and can replicate itself. Computer viruses have the ability to reproduce, infect each other, activate regeneration, and replicate. Once a file in the computer is infected with a computer virus, as the file is copied or spread, the computer virus infected by the file will also spread. .

[0003] At present, in order to ensure that the file resources in the computer are not damaged, antivirus software is usually selected to scan, kill or protect the files in the computer from viruses. However, in the process of virus detection and killing, the virus can fight a...

Images