Method and device for tracking virus sources

A source and virus technology, applied in the computer field, can solve the problem of repeated virus infection, unable to locate the source of virus transmission, unable to tell users the source of the virus, etc., to prevent repeated infection and facilitate virus cleaning.

Active Publication Date: 2019-06-07
BEIJING QIANXIN TECH
View PDF5 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] Although the current antivirus software has real-time monitoring functions, the antivirus software cannot tell the user the source of the virus, especially when the shared directory is infected, it cannot locate the source of the virus transmission, which will cause repeated virus infections

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for tracking virus sources
  • Method and device for tracking virus sources
  • Method and device for tracking virus sources

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0025] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0026] figure 1 A schematic flowchart of a method for tracing virus sources provided by an embodiment of the present invention is shown.

[0027] Such as figure 1 As shown, the method for tracing the source of the virus provided by the embodiments of the present invention specifically includes the following steps:

[0028] S11. Monitor and inte...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention provides a method and a device for tracking a virus source. The method comprises the following steps: monitoring and intercepting data packets on each network card of ahost; analyzing an SMB protocol packet from the intercepted data packet, and analyzing operation information of each stage of the SMB session from the SMB protocol packet; connecting the operation information of each stage of the SMB session in series to obtain complete file operation information and source information; storing the file operation information and the source information in a database; and when the real-time protection system detects the shared directory virus file, obtaining the source of the shared directory virus file by inquiring a database. According to the embodiment of the invention, the complete file operation information and source information are obtained by analyzing the SMB protocol packet. The method has the advantages that when the virus files transmitted by the shared directory are detected, the source of the virus is obtained by inquiring the database, so that an administrator can accurately position the source of the virus in the network, the virus is convenient to clean, and the local area network virus is prevented from being repeatedly infected.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer technology, and in particular, to a method and device for tracing virus sources. Background technique [0002] With the rapid development of computer network technology, the acquisition, sharing and dissemination of information has become more convenient, but the risk of information leakage has also increased. Within the government and enterprises, important documents are circulated and shared among multiple people, increasing the possibility of data leakage. [0003] Although the current anti-virus software has real-time monitoring functions, the anti-virus software cannot tell the user the source of the virus, especially when the shared directory is infected, it cannot locate the source of virus transmission, which will cause repeated virus infections. Therefore, how to effectively trace the source of shared directory viruses is an urgent problem to be solved. Contents of the...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/55
Inventor 刘同豪邓凡薛仟浩路尧
Owner BEIJING QIANXIN TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products