Malicious sample detection method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention relates to the field of computer security, in particular to a malicious sample detection method and device, electronic equipment and a storage medium. The malicious sample detection method comprises the following steps: performing static analysis on a to-be-detected sample to obtain all behavior instructions existing in the to-be-detected sample; wherein the behavior instruction comprises an instruction type and an instruction parameter; determining an abnormal instruction in all the behavior instructions; and based on the determined abnormal instruction, judging whether the to-be-detected sample is a malicious sample or not. According to the technical scheme, the detection efficiency of the to-be-detected sample is improved in a static analysis mode, whether the to-be-detected sample is a malicious sample or not can be effectively judged on the basis of the determined abnormal instruction, and therefore the problem that the malicious sample is difficult to effectively detect is solved.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer security, and in particular to a detection method, device, electronic equipment and storage medium of a malicious sample. Background technique [0002] With the continuous development of informatization and intelligent construction in all walks of life in recent years, the continuous improvement of the level of social informatization has also put forward new requirements for the security of information systems, and malicious threats will have a great impact on the security of information systems. Impact. [0003] In related technologies, detection methods for malicious threats generally include feature-based detection methods and dynamic behavior-based detection methods. Among them, the feature-based detection method uses a malicious code detection engine to detect whether the content of the sample to be tested contains malicious code, and the dynamic behavior-based detection met...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problem that malicious samples are difficult to be effectively detected, embodiments of the present invention provide a detection method, device, electronic equipment and storage medium for malicious samples

Images