A kind of encrypted compressed package analysis method and device

Abstract

Embodiments of the present invention provide a method and device for analyzing an encrypted compressed package. The method for analyzing an encrypted compressed package includes: acquiring an encrypted compressed package to be analyzed; passwords to be used; decompress the encrypted compressed package by using the plurality of passwords to be used. The method and device for analyzing an encrypted compressed package provided by the embodiments of the present invention predict multiple passwords to be used according to the self information and / or external information of the encrypted compressed package, and use the multiple passwords to be used to compress the encrypted compressed package. The package is decompressed, so that the decompression success rate of the encrypted compressed package can be improved.

Description

technical field [0001] The invention relates to the technical field of computers, in particular to a method and device for analyzing encrypted compressed packets. Background technique [0002] Encryption is to change the original information data with a special algorithm, so that even if the unauthorized user obtains the encrypted information, he still cannot understand the content of the information because he does not know the decryption method. With the strengthening of corporate security awareness, many companies now actively require staff to use encryption when storing and sending relevant data. This makes the staff in the enterprise gradually develop the habit of encrypting documents. Encrypting the file data in the enterprise can improve the security of the enterprise data well, so that the corporate secret can be well protected. [0003] At present, in the field of malware attack, an attack method often used by attackers is to encrypt and compress the malware and s...

AI Technical Summary

Problems solved by technology

[0004] For security software or security analysis systems used for security control or risk control in enterprises, the decryption of encrypted compressed packages is the first test that security analysis systems need to overcome. Existing security analysis systems encounter encryption and compression. The package is often unable to be processed, or can only be decrypted with a preset password, resulting in a low success rate of analysis of the encrypted compressed package

Images