Analysis method for newly appearing malicious codes

Abstract

The invention discloses an analysis method for newly appearing malicious codes, relates to the field of malicious code analysis, and aims to solve the problem that the whole malicious code analysis and processing effect is reduced due to the fact that a matched method cannot be used for virus killing after malicious code detection. According to the technical scheme, the method is characterized by comprising the following steps of S1, configuring simulation running parameters, S2, running a test, loading the configured running parameters and detection data into storage hardware to be detected, S3, analyzing malicious codes, setting a malicious code analysis program to analyze the types of the generated malicious codes, S4, processing mixed codes, and S5, analyzing the malicious codes. And S5, recording and prevention: recording the malicious code type and condition of the last malicious code analysis by the setting program. And the effects of detecting multiple types of malicious codes, correspondingly solving the problem of inputting the malicious codes and new malicious codes and facilitating detection are achieved.

Description

technical field [0001] The invention relates to the technical field of malicious code analysis, in particular to an analysis method for emerging malicious codes. Background technique [0002] Malicious code is also known as malicious software. These software can also be called adware, spyware, and malicious shareware. Different from viruses or worms, software that is legitimate rights and interests of users is not secretly written and disseminated by small groups or individuals. On the contrary, many well-known companies and groups are involved in such software, sometimes called rogue software. [0003] Existing malicious code detection is to detect the software inside the hard disk through test data. After two detections, the first detection result is compared with the second detection result. The software inside has malware inside. [0004] The above-mentioned existing technical solutions have the following defects: as the times change, the spread of malicious codes does...

AI Technical Summary

Problems solved by technology

[0004] The above-mentioned existing technical solutions have the following defects: as the times change, the spread of malicious codes does not rely solely on software vulnerabilities or social engineering, but may be a mixture of them, such as worms that produce parasitic file viruses, Trojan programs, password stealing programs, and backdoor programs further blur the distinction between worms, viruses, and Trojans, but existing detection methods can only detect a single virus program, resulting in the inability to use a matching method for antivirus after detection, reducing The overall analysis and processing effect of malicious code