File detection method and device, equipment and storage medium

Abstract

The invention discloses a file detection method and device, equipment and a storage medium. The method comprises the following steps: collecting a to-be-detected file; executing a detection operation on the to-be-detected file through the file detection model; wherein the file detection model is generated based on malicious advertisement file samples and credibility information training corresponding to digital signatures in the malicious advertisement file samples; and obtaining a file detection result obtained by detecting the to-be-detected file by the file detection model. The file detection model takes the credibility information of the advertisement file as one of the dimensions for detecting whether the advertisement file is the malicious advertisement file or not, so that even if codes in the malicious advertisement file change, the file detection model can identify and detect the malicious advertisement file according to the credibility information corresponding to the digital signature representation of the malicious advertisement file; and the accuracy of file detection can be relatively ensured. In addition, the invention further provides a file detection device and equipment and a storage medium, and the beneficial effects are as described above.

Description

technical field [0001] The present application relates to the field of network security, in particular to a file detection method, device, equipment and storage medium. Background technique [0002] With the development of the Internet, users have higher and higher requirements on the security of files on the Internet. Malicious advertisement files often pop up malicious windows in the customer's system operation interface, so they need to be detected and identified by the customer's host and prohibited from running. At present, most file detection systems usually use a detection model trained by malicious advertisement file samples to detect the file to be detected, that is, virus scanning and killing, so as to determine whether the advertisement file to be detected is a malicious advertisement file. [0003] However, when using the detection model trained based on malicious advertisement file samples to detect the files to be detected, once the malicious advertisement fil...

AI Technical Summary

Problems solved by technology

[0003] However, when using the detection model trained based on malicious advertisement file samples to detect the files to be detected, once the malicious advertisement files change slightly or face the latest malicious advertisement files, the file detection system will often miss the report, making it difficult to ensure the accuracy of file detection

Images