Server mining virus protection system and method

Abstract

The invention relates to a server mining virus protection system and method. At present, most of hacker organizations turn to the camp of mining viruses due to enormous benefits of the virtual currency and gradual rising of gas flames of the mining viruses, so that the mining viruses have very many novel variants, and most of the existing mining virus protection modes based on the feature librarycannot achieve a very good effect. Server resource fine-grained management and control are taken as a core, a process management and control driving technology is utilized to control the utilizationrate of core resources (a CPU, an internal memory, a video memory, a hard disk and a network) of the server, and illegal processes using the resources are limited at a very low level, so that the corefunction of the mining virus is fundamentally limited. The traffic for a protected server is analyzed in combination with the network side. The traffic is compared with mining virus flow characteristics. The traffic is compared with a mine pool resource pool so as to identify whether mining virus flow exists in the network or not. Resources, a host and a network are linked, so that mining viruseshave no place to hide, and meanwhile, the mining virus epidemic situation can be notified to a safety administrator in time to be treated in time.

Description

technical field [0001] The invention relates to a system and method for server mining virus protection, which implements in-depth defense against mining viruses at the three levels of host, process and network. At the resource level, use server resource consumption control technology combined with whitelist technology; at the process level, use blacklist technology and driver layer process start-stop control technology; at the network level, use traffic analysis technology and mining threat intelligence technology. Visualization technology is used to present the discovered mining virus risk warning in real time. [0002] Abbreviations and explanations: Background technique [0003] Like traditional Trojan horses, these miners who "kidnap" your computer will implant these mining viruses into certain programs. If you download these programs, it is very likely that your computer will be invaded by mining Trojan horses. Different from traditional Trojans, these mining Trojans ...

AI Technical Summary

Problems solved by technology

Not only that, because the CPU of the computer is occupied by mining Trojan horses, your computer will become very hot and the operating speed will drop sharply. If the servers of some enterprises and institutions that provide external services are infected with mining viruses, it may cause Due to the serious performance loss of the server, there are problems such as denial of service that seriously affect the business

Images