Script behavior recognition method and device, storage medium and computer equipment
An identification method and scripting technology, applied in the field of network security, can solve problems such as identification of non-aggressive behaviors, hidden dangers of vulnerability protection, and monitoring of behaviors affecting scripts
Active Publication Date: 2021-02-23
QI AN XIN SECURITY TECH ZHUHAI CO LTD +1
View PDF9 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0003] In view of this, the present invention provides a script behavior recognition method and device, storage medium, computer equipment, the main purpose is to solve the existing , only monitors the command execution sequence in the script, but cannot identify the aggressive behavior, resulting in the failure of vulnerability protection and affecting the monitoring of script behavior, resulting in the security risks of vulnerability protection in network security
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0057] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.
[0058] The embodiment of the present invention provides a script behavior recognition method, such as figure 1 As shown, the method includes:
[0059] 101. Configure an API call parameter in a target monitoring event, and when it is detected that the API call parameter is called, suspend the process of executing the target monitoring event, and acquire an instruction execution sequence in the process.
[0060] In the embodiment of...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a script behavior recognition method and device, a storage medium and computer equipment, relates to the technical field of network security, and mainly aims to solve the problems that when vulnerability defense is performed at present, only an instruction execution sequence in a script is monitored, aggressive behaviors cannot be recognized, vulnerability defense fails, the monitoring of script behaviors is influenced, and so that potential safety hazards of vulnerability protection in network security are generated. The method comprises the steps of configuring API calling parameters in a target monitoring event, and when it is monitored that the API calling parameters are called, suspending a process for executing the target monitoring event, and obtaining an instruction execution sequence in the process; judging whether the instruction execution sequence is returned to the script module for execution or not; and if the instruction execution sequence is not returned to the script module for execution, determining a script behavior corresponding to the instruction execution sequence according to the thread creation state of the process, and processing theprocess according to the script behavior.
Description
technical field [0001] The invention relates to the technical field of network security, in particular to a script behavior recognition method and device, a storage medium, and computer equipment. Background technique [0002] A script is composed of multiple instruction execution sequences, and the script compiler executes the behavior corresponding to the instruction execution sequence. At present, in the existing system, because the execution instruction sequence in the script is combined and written by technicians according to different needs, it often has a normal instruction execution sequence. When performing vulnerability defense, only the instruction execution sequence in the script is monitored. , can not identify the aggressive behavior, resulting in the failure of vulnerability protection, affecting the monitoring of script behavior, thus creating a security risk of vulnerability protection in network security. Contents of the invention [0003] In view of thi...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/30G06F21/57
CPCG06F11/3051G06F21/577
Inventor 王明广游勇杨晓东李阳
Owner QI AN XIN SECURITY TECH ZHUHAI CO LTD