9 results about "Computer virus" patented technology

Source code for a type of malware is received. For example, the source code may be source code from a type of computer virus. An Artificial Intelligence (AI) algorithm is identified. For example, the AI algorithm may be ChatGPT. The source code of the type of malware is run through the AI algorithm to produce mutated source code for the type of malware. A prediction algorithm is used to predict a signature of the mutated source code for the type of malware. For example, the prediction algorithm is trained using existing source code of different types of malware to generate a prediction model. The signature of the mutated source code for the type of malware is then compared to a signature of a potentially new type of malware to determine if the signatures are similar.

In an image forming apparatus, appropriate virus infection countermeasure processing is executed using a new virus scanning engine or the like, and a likelihood that the image forming apparatus may be infected with a computer virus is reduced.An information processing apparatus includes a print data acquirer that acquires print data, a virus detector that executes predetermined infection countermeasure processing on the print data and detects a computer virus, a virus scanning information generator that generates virus scanning information for specifying a setting item related to the infection countermeasure processing executed and adds the virus scanning information to print data in which a computer virus has not been detected by the virus detector, a print information generator that generates print information including print data requested from an image forming apparatus connected via a network among a plurality of pieces of the print data acquired, and a print information transmitter that transmits the generated print information to the image forming apparatus.

The invention discloses a computer virus intelligent defense method and system based on data mining, and belongs to the technical field of network security, and the defense method comprises the following specific steps: I, collecting various behavior data in a computer system, extracting corresponding behavior characteristics, carrying out entropy modeling according to each behavior characteristic, and analyzing entropy fluctuation in real time; iI, constructing a heterogeneous threat relation graph according to an analysis result, and reasoning a threat propagation path based on the heterogeneous threat relation graph; according to the method, the whole-process defense capability can be improved, normal behaviors and potential threats can be effectively distinguished, false alarm and missing alarm are reduced, the capability of coping with unknown viruses, variant viruses and zero-day attacks is greatly improved, the viruses are prevented from reversely bypassing defense, a complex threat propagation chain can be accurately recognized, the active trapping and behavior reduction capability is improved, and the method is suitable for popularization and application. The attack chain tracking and threat tracing capability is improved, and the system robustness is improved.

The present application belongs to the field of computer information security technology, and discloses a computer virus detection method and computer equipment. In addition to matching the target process to be detected with the virus signature code, the scheme also matches the target process to be detected with the virus behavior characteristics, thereby realizing risk assessment of the dynamic real-time behavior of the target process, and making the computer virus detection result more reliable. In addition, a feature frequent item set of the process behavior characteristics is constructed, and feature association rules are generated for the feature frequent item set. Feature association rules with a confidence level above a preset threshold are determined as strong association rules. When the process behavior executed in the target process matches the prerequisite in the strong association rule, the security level of the subsequent behavior of the target process is further predicted, thereby realizing early warning of possible risks before dangerous behavior occurs, facilitating further disposal in advance, and improving the security of the computer system.

The application provides a computer virus retrieval method and device, computer equipment and a storage medium, relates to the technical field of computer security, and is used for improving the retrieval efficiency of computer viruses. The method mainly comprises the following steps: establishing a retrieval intermediate layer, and judging whether the virus information of the to-be-detected file is contained in the threat intelligence library based on the retrieval intermediate layer.

The invention relates to the technical field of computers, and discloses a computer virus protection method and system, and the method comprises the following steps: 1, collecting static feature information and dynamic behavior data of intelligent terminal equipment in a network, constructing an equipment portrait of the intelligent terminal equipment according to the static feature information, converging the device portrait and the dynamic behavior data into a shared data pool; and 2, extracting historical dynamic behavior data from the shared data pool, and establishing a normal behavior baseline model for the intelligent terminal equipment. According to the technical scheme of constructing the collaborative protection system covering the intelligent terminal equipment of the whole network, the data of all the intelligent terminal equipment in the network are collected and converged into the shared data pool for unified analysis and linkage response, so that the protection range is expanded from single equipment to a heterogeneous equipment network; the technical effect of integrated security coverage of all networking devices is achieved.

The application provides a kind of computer virus library distributed storage method based on blockchain and its related device, it is related to distributed storage technical field, including any one storage node obtains the virus file reported by internet antivirus software, the virus file is stored in its disk array, and generates the summary information of the operation information and virus file of warehousing, operation information and the summary information of virus file are written into blockchain to generate new block;Any one storage node initiates a deletion request, and generates the summary information of the operation information and virus file to be deleted, after operation information and the summary information of virus file to be deleted are written into blockchain to generate new block, in the disk array of the storage node, virus file to be deleted is deleted, the present application is used to solve the technical problems that the warehousing management function of existing virus library is weak, the degree of automation is not high, and paralysis, data tampering and data loss exist.

The present invention relates to a computer virus interception method. The method includes: executing the following steps by a processor unit: providing for a user to configure a default software status list by operating a default status configuration interface, wherein the default software status list includes a plurality of macro application software; providing for the user to configure a software whitelist by operating a software whitelist configuration interface; providing for the user to configure a hardware whitelist by operating a hardware whitelist configuration interface; and performing an identity re-authentication process to re-authenticate an identity information of the user when one of a default status change operation, a software whitelist change operation, a hardware whitelist change operation, and a software whitelist anomaly is detected.

The invention relates to the technical field of computer hardware devices, and discloses a computer virus prevention and control hardware device which comprises an installation mechanism and a control mechanism. The ventilation opening is formed in the top of the front face of the installation shell, the dust cover is fixedly installed on the inner side of the ventilation opening, the heat dissipation openings are formed in the two sides of the installation shell, the heat dissipation net covers are fixedly installed on the inner sides of the heat dissipation openings, and the lifting assemblies are arranged on one sides of the heat dissipation openings. According to the computer hardware device for preventing and treating the viruses, through an integrated mounting mechanism which comprises a ventilation opening, a dust cover, a heat dissipation opening and a heat dissipation net cover, the heat dissipation and dust prevention capacity of equipment is effectively improved, and the heat dissipation efficiency is further improved through a lifting assembly and a sliding groove, a sliding block and a heat dissipation part in the lifting assembly; flexible height adjustment and stable supporting are achieved through a power assembly and a bearing assembly in the adjusting mechanism, the stability and use convenience of the device are integrally improved, and the computer virus prevention and control hardware device is more efficient and durable.