Uploaded file threat detection method and device, and computer readable storage medium

Abstract

The invention discloses an uploaded file threat detection method and device, and a computer readable storage medium, wherein the scheme provided by the invention comprises the steps of obtaining uploading log data corresponding to an uploaded file, wherein the uploading log data comprises a multi-purpose Internet mail extension MINE type and a file extension name of the uploaded file; performing consistency detection on the MINE type and the file extension name of the uploaded file according to the uploaded log data; performing anomaly detection on the content of a suspicious uploading file of which the MINE type is inconsistent with the file extension detection in the uploading file; detecting whether a target upload file with abnormal content detection in the suspicious upload file is an executable program or not; and determining the target uploaded file which is detected as the executable program as a threat file. According to the method and the device, malicious files in the uploaded files can be effectively detected, and the risk that a Web website is threatened and attacked is reduced.

Description

technical field [0001] The present application relates to the technical field of vehicle security, in particular to a method and device for detecting threat of uploaded files, and a computer-readable storage medium. Background technique [0002] Various threats and attacks that may exist in the files uploaded by users in the process of using the Web site. In order to reduce the risk of malicious attacks on the site, the file types allowed by the system are usually limited to a certain range, such as image files, or a text file. [0003] However, illegal users will circumvent this restriction by tampering with the uploaded file type and other means. As a result, the uploaded file is actually a malicious file, which will cause more security problems in the later stage of file use, thus posing a security threat to the network environment and hardware assets. . [0004] How to effectively detect malicious files in uploaded files, reduce the risk of web sites being threatened a...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the embodiments of the present application is to provide a method and device for uploading file threat detection, and a computer-readable storage medium to solve the problem that a potential malicious uploaded file causes a Web site to be threatened and attacked

Images