CN107291614A - File method for detecting abnormality and electronic equipment - Google Patents
File method for detecting abnormality and electronic equipment Download PDFInfo
- Publication number
- CN107291614A CN107291614A CN201710307282.3A CN201710307282A CN107291614A CN 107291614 A CN107291614 A CN 107291614A CN 201710307282 A CN201710307282 A CN 201710307282A CN 107291614 A CN107291614 A CN 107291614A
- Authority
- CN
- China
- Prior art keywords
- abnormal information
- classification block
- history
- file
- file destination
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/36—Preventing errors by testing or debugging software
- G06F11/3604—Software analysis for verifying properties of programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/36—Preventing errors by testing or debugging software
- G06F11/362—Software debugging
- G06F11/3628—Software debugging of optimised code
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Debugging And Monitoring (AREA)
Abstract
The present invention is applied to computer security technique field, and there is provided a kind of file method for detecting abnormality and electronic equipment.This method includes：File destination is obtained, file destination is document, code or script, and file destination is divided into at least one classification block；According to history abnormal information set, detect in each classification block of file destination whether include the abnormal information corresponding with the history abnormal information in history abnormal information set；Wherein, at least one abnormal information of each classification block correspondence；When including the abnormal information corresponding with history abnormal information in the classification block for detecting file destination, prompting message is sent.This method by file destination by being divided at least one classification block, so that being carried out to the Scanning Detction of file destination in units of classification block, different Scanning Detction modes are taken different classification blocks, to reduce the unnecessary Scanning Detction time, the efficiency of Scanning Detction are improved.
Description
Technical field
The invention belongs to computer security technique field, more particularly to a kind of file method for detecting abnormality and electronic equipment.
Background technology
Technical staff generally after exploitation completes some function, need to check that this function is corresponding in development and application program
With the presence or absence of the problem of being had occurred and that in process of application development in code, asked for example, there is written in code mistake etc.
Topic, the problem of to reduce or prevent from triggering identical again.But the above method needs the corresponding code of the hand inspection function,
When the code of the function is more, the problem of being easily caused inspection inefficiency.
The content of the invention
In view of this, it is existing to solve the embodiments of the invention provide a kind of file method for detecting abnormality and electronic equipment
In technology the problem of file abnormal examination inefficiency.
The first aspect of the embodiment of the present invention there is provided a kind of file method for detecting abnormality, including：
File destination is obtained, the file destination is document, code or script, and the file destination is divided into at least one
Individual classification block；
According to history abnormal information set, whether include in each classification block for detecting the file destination and gone through with described
The corresponding abnormal information of history abnormal information in history abnormal information set；Wherein, the history abnormal information set includes
A plurality of history abnormal information；
The abnormal information corresponding with the history abnormal information is included in the classification block for detect the file destination
When, send prompting message.
Optionally, whether included and the history abnormal information collection in each classification block of the detection file destination
The corresponding abnormal information of history abnormal information in conjunction includes：
Obtain each described classification block and scan mode corresponding with the classification block of the file destination；
By scan mode corresponding with classification block each described, detect whether to include in the classification block and gone through with described
The corresponding abnormal information of history abnormal information in history abnormal information set.
Optionally, the corresponding scan mode of the classification block that obtains is specially：
Obtain the abnormal information detected in preset time period in each described file destination, then according to acquisition each
Abnormal information sets corresponding scan mode to classification block each described.
Optionally, whether include different with history in the history abnormal information set in the detection classification block
Often the corresponding abnormal information of information is specially：
To each described classification block, it is scanned by keyword and preset algorithm, to detect in each described classification block
Whether with the history abnormal information corresponding abnormal information is included.
Optionally, in addition to：Export positional information of the abnormal information in the file destination.
There is provided a kind of file abnormality detection electronic equipment, including memory, processing for the second aspect of the embodiment of the present invention
Device and it is stored in the file abnormality detecting program that can be run on the memory and on the processor, the computing device
Following steps are realized during the file abnormality detecting program：
File destination is obtained, the file destination is document, code or script, and the file destination is divided into at least one
Individual classification block；
According to the history abnormal information set, detect whether included in each classification block of the file destination with it is described
The corresponding abnormal information of history abnormal information；Wherein, the history abnormal information set includes a plurality of history abnormal information
The abnormal information corresponding with the history abnormal information is included in the classification block for detect the file destination
When, send prompting message.
Optionally, it is described according to history abnormal information set, whether wrapped in each classification block for detecting the file destination
Specifically included containing the abnormal information corresponding with the history abnormal information：
Obtain each described classification block and scan mode corresponding with the classification block of the file destination；
By scan mode corresponding with classification block each described, detect in the classification block whether include and the history
The corresponding abnormal information of history abnormal information in abnormal information set.
Optionally, described each described classification block for obtaining the file destination and scanning side corresponding with the classification block
Formula is specially：The abnormal information detected in preset time period in each described file destination is obtained, then according to each of acquisition
Individual abnormal information sets corresponding scan mode to classification block each described.
Optionally, it is described by scan mode corresponding with classification block each described, detect whether wrapped in the classification block
It is specially containing the abnormal information corresponding with the history abnormal information in the history abnormal information set：To each described classification
Block, is scanned by keyword and preset algorithm, to detect in each described classification block whether include different with the history
The corresponding abnormal information of normal information.
Optionally, the processor is additionally operable to perform the file abnormality detecting program, to realize following steps：Output institute
State positional information of the abnormal information in the file destination.
The embodiment of the present invention is had the advantage that relative to prior art：The embodiment of the present invention, obtains file destination
And the file destination is divided at least one classification block；According to history abnormal information set, each of the file destination is detected
Whether with history abnormal information in the history abnormal information set corresponding abnormal information is included in individual classification block；Its
In, each at least one described abnormal information of the classification block correspondence；Included in the classification block for detecting the file destination
During corresponding with history abnormal information abnormal information, prompting message is sent, by the way that file destination is divided into at least one
Classification block so that carry out, for processing, taking different classification blocks in units of classification block to the Scanning Detction of file destination
Different Scanning Detction modes, to reduce the Scanning Detction time that some classifications are unnecessary, reduction is swept to whole file destination
Retouch detection time, it is possible to increase the efficiency of Scanning Detction.
Brief description of the drawings
Technical scheme in order to illustrate the embodiments of the present invention more clearly, below will be to embodiment or description of the prior art
In required for the accompanying drawing that uses be briefly described, it should be apparent that, drawings in the following description are only some of the present invention
Embodiment, for those of ordinary skill in the art, without having to pay creative labor, can also be according to these
Accompanying drawing obtains other accompanying drawings.
Fig. 1 is the flow chart of file method for detecting abnormality provided in an embodiment of the present invention；
Fig. 2 is the implementation process figure of step S102 in Fig. 1；
Fig. 3 is the instantiation flow chart of file method for detecting abnormality provided in an embodiment of the present invention；
Fig. 4 is the running environment schematic diagram of file abnormality detecting program provided in an embodiment of the present invention；
Fig. 5 is the functional block diagram of file abnormality detecting program provided in an embodiment of the present invention.
Embodiment
In describing below, in order to illustrate rather than in order to limit, it is proposed that such as tool of particular system structure, technology etc
Body details, thoroughly to understand the embodiment of the present invention.However, it will be clear to one skilled in the art that there is no these specific
The present invention can also be realized in the other embodiments of details.In other situations, omit to well-known system, device, electricity
Road and the detailed description of method, in case unnecessary details hinders description of the invention.
In order to illustrate technical solutions according to the invention, illustrated below by specific embodiment.
Fig. 1 shows the implementation process of file method for detecting abnormality provided in an embodiment of the present invention, and details are as follows：
Step S101, obtains file destination, and the file destination is document, code or script, and by the file destination
It is divided at least one classification block.
Wherein it is possible to according to genealogical classification, module classification, statistical classification, analysis classification or the mode such as application class by institute
State file destination and be divided at least one classification block, to cause each classification block to represent a system, One function module or one kind
Using.File destination is divided at least one classification block, enabled to the Scanning Detction of file destination in units of classification block
Carry out for processing, by taking different classification blocks different Scanning Detction modes, it is possible to increase the efficiency of Scanning Detction.
Specifically, document can be word document or excel documents etc., code can for java codes, js codes,
Html codes, xml codes or sql scripted codes etc., but be not limited thereto.
Whether step S102, according to history abnormal information set, include in each classification block for detecting the file destination
There is the abnormal information corresponding with the history abnormal information in the history abnormal information set.
Wherein, the abnormal information refers to the BUG (leak) included in file destination, and the generation of abnormal information is probably
Because the experience of staff is not caused enough.Specifically, staff is when handling file destination, due to possibility of lacking experience
Cause the presence of the unpredictable abnormal information (such as trap) arrived of the staff in file destination.
A plurality of history abnormal information can be included in the history abnormal information set, every history abnormal information can be with
The abnormal information gone out by Scanning Detction in the file destination before acquisition is drawn.Specifically, the target text before can counting
The abnormal information (being also known as thunder point or leak) occurred in part, is then divided each bar abnormal information according to preset rules
Class so that can correspond to a classification block per class abnormal information.
It is then possible to detect in each classification block whether include corresponding history abnormal information.Specifically, for a class
Other piece, only detection need to be scanned by corresponding class history abnormal information.
Referring to Fig. 2, in one embodiment, step S102 can be realized by procedure below：
Step S201, obtains each described classification block of the file destination and scanning side corresponding with the classification block
Formula.
As a kind of embodiment, the corresponding scan mode of the acquisition classification block is specially：Gone through according to each
The history abnormal information detected in history file destination sets corresponding scan mode to classification block each described.
Specifically, each history abnormal information that got can be classified according to preset rules, obtain multiclass and go through
History abnormal information, and according to the situation of every class history abnormal information, frequency that for example such history abnormal information occurs, such goes through
The order of severity of history abnormal information, in conjunction with history abnormal information and the corresponding relation of each classification block, sets to each classification block
Corresponding Scanning Detction mode is put, to reduce the sweep time that some classifications are unnecessary, the scanning to whole file destination is reduced
Time.The corresponding relation of history abnormal information and classification block can be by being divided history file destination according to preset rules
Class, counts the corresponding classification block of all kinds of history abnormal informations and draws.
For example, Scanning Detction mode can include skipping scanning, partial scan and all scanning etc..For the frequency of appearance
The higher corresponding classification block of history abnormal information of the larger, order of severity, can be scanned by the way of all scanning；It is right
In the corresponding classification block of history abnormal information that the frequency of appearance is smaller, the order of severity is relatively low, partial scan or jump can be used
The mode of overscanning is scanned.
It should be noted that the history abnormal information detected in each history file destination can be as the mesh to after
The history abnormal information needed during mark file scan detection.And each bar history abnormal information in history abnormal information set can
Abnormal information before thinking current time in all times, or the abnormal letter before current time in preset time period
Breath.
Step S202, by scan mode corresponding with classification block each described, detects whether included in the classification block
There is the abnormal information corresponding with the history abnormal information in the history abnormal information set.
In the present embodiment, Scanning Detction mode can include a variety of scan modes, for example skip scanning, partial scan and entirely
Portion's scanning etc..For example, the history abnormal information set includes three class history abnormal informations, respectively first kind history is abnormal
Information, Equations of The Second Kind history abnormal information and the 3rd class history abnormal information；File destination is divided into three classes according to preset rules
Other piece, respectively first category block, second category block and the 3rd classification block.Wherein, first category block and first kind history are abnormal
Information correspondence, second category block is corresponding with Equations of The Second Kind history abnormal information, the 3rd classification block and the 3rd class history abnormal information pair
Should.And the corresponding scan mode of first category block is to ignore scanning, the corresponding scan mode of second category block is partial scan, the
The corresponding scan mode of three classification blocks is all scanning.
According to above-mentioned setting, scanning is ignored to the first category block of file destination, the second category block of file destination is entered
Row partial scan, whole scannings are carried out to the 3rd classification block of file destination, to accelerate the sweep speed to whole file destination,
Also it can accomplish to shoot the arrow at the target, not the heavier abnormal information of leakiness.
As a kind of embodiment, whether included and the history abnormal information set in the detection classification block
In the corresponding abnormal information of history abnormal information be specially：To each described classification block, pass through keyword and preset algorithm
It is scanned, to detect in each described classification block whether include abnormal information corresponding with the history abnormal information.It is logical
Setting keyword and preset algorithm are crossed, the Scanning Detction time to each classification block of file destination can be further reduced, carry
High detection efficiency.
Step S103, comprising corresponding with the history abnormal information in the classification block for detect the file destination
During abnormal information, prompting message is sent.
It should be understood that being contained in the corresponding exception of the history abnormal information in the classification block for detecting file destination
During information, prompting message is sent, to remind developer to note thunder point, so as to prevent developer's operation that there is abnormal information
File destination.Wherein, prompting message can be acousto-optic prompting message or word prompting message, and this is not limited.
Optionally, after step s 103, this document method for detecting abnormality can also include：The abnormal information is exported to exist
Positional information in the file destination.Positional information of the output abnormality information in file destination, enables to developer
The problem of finding file destination in time is to be corrected, so as to improve operating efficiency.
Fig. 3 shows the idiographic flow schematic diagram of this document method for detecting abnormality, and details are as follows：
Step S301, obtains file destination, and the file destination is document, code or script, and by the file destination
It is divided at least one classification block.
Step S302, obtains history abnormal information set, and the history abnormal information set is believed extremely comprising a plurality of history
Breath.
Step S303, obtains each described classification block of the file destination and scanning side corresponding with the classification block
Formula.
Step S304, by scan mode corresponding with each classification block, is scanned by keyword and preset algorithm,
To detect in each described classification block whether include abnormal information corresponding with the history abnormal information.
Step S305, comprising corresponding with the history abnormal information in the classification block for detect the file destination
During abnormal information, prompting message is sent.
Step S306, exports positional information of the abnormal information in the file destination.
Above-mentioned file method for detecting abnormality, obtains file destination and the file destination is divided into at least one classification block；
According to history abnormal information set, whether include in each classification block for detecting the file destination and believe extremely with the history
The corresponding abnormal information of history abnormal information in breath set；Wherein, at least one is described different for each classification block correspondence
Normal information；The abnormal information corresponding with the history abnormal information is included in the classification block for detect the file destination
When, prompting message is sent, by the way that file destination is divided into at least one classification block so as to the Scanning Detction of file destination with class
Other piece is that unit carries out, for processing, different classification blocks being taken different Scanning Detction modes, to reduce some classifications not
The necessary Scanning Detction time, reduce the Scanning Detction time to whole file destination, it is possible to increase the efficiency of Scanning Detction.
It should be understood that the size of the sequence number of each step is not meant to the priority of execution sequence, each process in above-described embodiment
Execution sequence should determine that the implementation process without tackling the embodiment of the present invention constitutes any limit with its function and internal logic
It is fixed.
Corresponding to the file method for detecting abnormality described in foregoing embodiments, Fig. 4 shows text provided in an embodiment of the present invention
The running environment schematic diagram of part abnormality detecting program.For convenience of description, it illustrate only part related to the present embodiment.
In the present embodiment, described file abnormality detecting program 400 is installed and run in electronic equipment 40.The electricity
Sub- equipment 40 can be mobile terminal, palm PC, server etc..The electronic equipment 40 may include, but be not limited only to, memory
401st, processor 402 and display 403.Fig. 4 illustrate only the electronic equipment 40 with component 401-403, it should be understood that
It is, it is not required that implement all components shown, the more or less component of the implementation that can be substituted.
The memory 401 can be the internal storage unit of the electronic equipment 40 in certain embodiments, for example should
The hard disk or internal memory of electronic equipment 40.The memory 401 can also be the electronic equipment 40 in further embodiments
The plug-in type hard disk being equipped with External memory equipment, such as described electronic equipment 40, intelligent memory card (Smart Media
Card, SMC), secure digital (Secure Digital, SD) card, flash card (Flash Card) etc..Further, it is described to deposit
Reservoir 401 can also both include the internal storage unit of the electronic equipment 40 or including External memory equipment.The memory
401 are used to store the application software and Various types of data for being installed on the electronic equipment 40, such as described file abnormality detecting program
400 program code etc..The memory 401 can be also used for temporarily storing the data that has exported or will export.
The processor 402 can be a central processing unit (Central Processing in certain embodiments
Unit, CPU), microprocessor or other data processing chips, the program code stored for running in the memory 401 or
Processing data, such as performing the file abnormality detecting program 400.
The display 403 can be that light-emitting diode display, liquid crystal display, touch control type LCD are shown in certain embodiments
Device and OLED (Organic Light-Emitting Diode, Organic Light Emitting Diode) touch device etc..The display 403
The information that is handled for being shown in the electronic equipment 40 and for showing visual user interface, such as application menu
Interface, application icon interface etc..The part 401-403 of the electronic equipment 40 is in communication with each other by system bus.
Referring to Fig. 5, being the functional block diagram of file abnormality detecting program 400 provided in an embodiment of the present invention.In this reality
Apply in example, described file abnormality detecting program 400 can be divided into one or more modules, one or more of moulds
Block is stored in the memory 401, and is held by one or more processors (the present embodiment is by the processor 402)
OK, to complete the present invention.For example, in Figure 5, described file abnormality detecting program 400 can be divided into acquisition classification mould
Block 501, memory module 502, detection module 503 and prompting module 504.Module alleged by the present invention is to refer to complete specific work(
The series of computation machine programmed instruction section of energy, than program more suitable for describing the file abnormality detecting program 400 in the electricity
Implementation procedure in sub- equipment 40.Function by the module 501-504 is specifically introduced is described below.
Wherein, sort module 501 is obtained, for obtaining file destination, the file destination is document, code or script,
And the file destination is divided at least one classification block.Memory module 502, it is described for storing history abnormal information set
History abnormal information set includes a plurality of history abnormal information.Detection module 503, for according in the memory module 502
Whether the history abnormal information set of storage, detect in each classification block of the file destination comprising different with the history
The corresponding abnormal information of normal information.Wherein, each at least one described abnormal information of the classification block correspondence.Prompting module
504, comprising relative with the history abnormal information in the classification block for detecting the file destination in the detection module
During the abnormal information answered, prompting message is sent.
Referring to Fig. 5, in one embodiment, the detection module 503 includes acquiring unit 601 and detection unit 602.Its
In, acquiring unit 601, for each the described classification block for obtaining the file destination and scanning side corresponding with the classification block
Formula.Detection unit 502, for by scan mode corresponding with classification block each described, detecting whether wrapped in the classification block
Containing the abnormal information corresponding with the history abnormal information in the history abnormal information set.
Optionally, the acquiring unit 601 specifically for：Obtain each in each described file destination in preset time period
Individual abnormal information, then sets corresponding scan mode according to each abnormal information of acquisition to classification block each described.
Optionally, the detection unit 602 specifically for：To each described classification block, pass through keyword and preset algorithm
It is scanned, to detect in each described classification block whether include abnormal information corresponding with the history abnormal information.
Optionally, this document abnormality detecting program can also include display module 505.Display module 505, for exporting
State positional information of the abnormal information in the file destination.
In summary, the file abnormality detecting program 400 installed and run in electronic equipment 40, obtains file destination simultaneously
The file destination is divided at least one classification block；According to history abnormal information set, each of the file destination is detected
Whether with history abnormal information in the history abnormal information set corresponding abnormal information is included in classification block；Its
In, each at least one described abnormal information of the classification block correspondence；Included in the classification block for detecting the file destination
During corresponding with history abnormal information abnormal information, prompting message is sent, by the way that file destination is divided into at least one
Classification block so that carry out, for processing, taking different classification blocks in units of classification block to the Scanning Detction of file destination
Different Scanning Detction modes, to reduce the Scanning Detction time that some classifications are unnecessary, reduction is swept to whole file destination
Retouch detection time, it is possible to increase the efficiency of Scanning Detction.
It is apparent to those skilled in the art that, for convenience of description and succinctly, only with above-mentioned each work(
Energy unit, the division progress of module are for example, in practical application, as needed can distribute above-mentioned functions by different
Functional unit, module are completed, i.e., the internal structure of described device is divided into different functional unit or module, more than completion
The all or part of function of description.Each functional unit, module in embodiment can be integrated in a processing unit, also may be used
To be that unit is individually physically present, can also two or more units it is integrated in a unit, it is above-mentioned integrated
Unit can both be realized in the form of hardware, it would however also be possible to employ the form of SFU software functional unit is realized.In addition, each function list
Member, the specific name of module are also only to facilitate mutually differentiation, is not limited to the protection domain of the application.Said system
The specific work process of middle unit, module, may be referred to the corresponding process in preceding method embodiment, will not be repeated here.
Those of ordinary skill in the art are it is to be appreciated that the list of each example described with reference to the embodiments described herein
Member and algorithm steps, can be realized with the combination of electronic hardware or computer software and electronic hardware.These functions are actually
Performed with hardware or software mode, depending on the application-specific and design constraint of technical scheme.Professional and technical personnel
Described function can be realized using distinct methods to each specific application, but this realization is it is not considered that exceed
The scope of the present invention.
In embodiment provided by the present invention, it should be understood that disclosed apparatus and method, others can be passed through
Mode is realized.For example, system embodiment described above is only schematical, for example, the division of the module or unit,
It is only a kind of division of logic function, there can be other dividing mode when actually realizing, such as multiple units or component can be with
With reference to or be desirably integrated into another system, or some features can be ignored, or not perform.It is another, it is shown or discussed
Coupling each other or direct-coupling or communication connection can be by some interfaces, the INDIRECT COUPLING of device or unit or
Communication connection, can be electrical, machinery or other forms.
The unit illustrated as separating component can be or may not be it is physically separate, it is aobvious as unit
The part shown can be or may not be physical location, you can with positioned at a place, or can also be distributed to multiple
On NE.Some or all of unit therein can be selected to realize the mesh of this embodiment scheme according to the actual needs
's.
In addition, each functional unit in each embodiment of the invention can be integrated in a processing unit, can also
That unit is individually physically present, can also two or more units it is integrated in a unit.Above-mentioned integrated list
Member can both be realized in the form of hardware, it would however also be possible to employ the form of SFU software functional unit is realized.
If the integrated unit is realized using in the form of SFU software functional unit and as independent production marketing or used
When, it can be stored in a computer read/write memory medium.Understood based on such, the technical scheme of the embodiment of the present invention
The part substantially contributed in other words to prior art or all or part of the technical scheme can be with software products
Form embody, the computer software product is stored in a storage medium, including some instructions are to cause one
Computer equipment (can be personal computer, server, or network equipment etc.) or processor (processor) perform this hair
The all or part of step of each embodiment methods described of bright embodiment.And foregoing storage medium includes：USB flash disk, mobile hard disk,
Read-only storage (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic
Dish or CD etc. are various can be with the medium of store program codes.
Embodiment described above is merely illustrative of the technical solution of the present invention, rather than its limitations；Although with reference to foregoing reality
Example is applied the present invention is described in detail, it will be understood by those within the art that：It still can be to foregoing each
Technical scheme described in embodiment is modified, or carries out equivalent substitution to which part technical characteristic；And these are changed
Or replace, the essence of appropriate technical solution is departed from the spirit and scope of various embodiments of the present invention technical scheme, all should
Within protection scope of the present invention.
Claims (10)
1. a kind of file method for detecting abnormality, it is characterised in that including：
File destination is obtained, the file destination is document, code or script, and the file destination is divided into at least one class
Other piece；
According to history abnormal information set, whether include different with the history in each classification block for detecting the file destination
The corresponding abnormal information of history abnormal information in normal information aggregate；Wherein, the history abnormal information set includes a plurality of
History abnormal information；
When including the abnormal information corresponding with the history abnormal information in the classification block for detect the file destination, hair
Go out prompting message.
2. file method for detecting abnormality according to claim 1, it is characterised in that the detection file destination it is each
Whether include in individual classification block comprising the abnormal information corresponding with the history abnormal information in the history abnormal information set：
Obtain each described classification block and scan mode corresponding with the classification block of the file destination；
By scan mode corresponding with classification block each described, detect in the classification block whether include different with the history
The corresponding abnormal information of history abnormal information in normal information aggregate.
3. file method for detecting abnormality according to claim 2, it is characterised in that the acquisition classification block is corresponding
Scan mode is specially：
The abnormal information detected in preset time period in each described file destination is obtained, then according to each exception of acquisition
Information sets corresponding scan mode to classification block each described.
4. file method for detecting abnormality according to claim 2, it is characterised in that in the detection classification block whether
Including the abnormal information corresponding with the history abnormal information in the history abnormal information set is specially：
To each described classification block, be scanned by keyword and preset algorithm, with detect in each described classification block whether
Include abnormal information corresponding with the history abnormal information.
5. file method for detecting abnormality according to any one of claim 1 to 4, it is characterised in that also include：
Export positional information of the abnormal information in the file destination.
6. a kind of computer-readable recording medium, the computer-readable recording medium storage has file abnormality detecting program, its
It is characterised by, when the file abnormality detecting program is by least one computing device, realizes as any in claim 1 to 5
Described in file method for detecting abnormality the step of.
7. a kind of file abnormality detection electronic equipment, it is characterised in that including memory, processor and be stored in the memory
File abnormality detecting program that is upper and can running on the processor, file abnormality detecting program described in the computing device
Shi Shixian following steps：
File destination is obtained, the file destination is document, code or script, and the file destination is divided into at least one class
Other piece；
According to history abnormal information set, detect whether included in each classification block of the file destination and history exception
The corresponding abnormal information of information；Wherein, the history abnormal information set includes a plurality of history abnormal information
When including the abnormal information corresponding with the history abnormal information in the classification block for detect the file destination, hair
Go out prompting message.
8. file abnormality detection electronic equipment according to claim 7, it is characterised in that described according to history abnormal information
Set, detects in each classification block of the file destination whether include the abnormal information corresponding with the history abnormal information
Specifically include：
Obtain each described classification block and scan mode corresponding with the classification block of the file destination；
By scan mode corresponding with classification block each described, detect whether included in the classification block and history exception
The corresponding abnormal information of history abnormal information in information aggregate.
9. file abnormality detection electronic equipment according to claim 8, it is characterised in that the acquisition file destination
Each described classification block and scan mode corresponding with the classification block be specially：Obtain each described mesh in preset time period
The abnormal information detected in mark file, then sets corresponding according to each abnormal information of acquisition to classification block each described
Scan mode.
10. file abnormality detection electronic equipment according to claim 8, it is characterised in that it is described by with described in each
The corresponding scan mode of classification block, detect whether included in the classification block it is different with history in the history abnormal information set
Often the corresponding abnormal information of information is specially：To each described classification block, it is scanned by keyword and preset algorithm, with
Whether include abnormal information corresponding with the history abnormal information in each described classification block of detection.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710307282.3A CN107291614B (en) | 2017-05-04 | 2017-05-04 | File abnormity detection method and electronic equipment |
| PCT/CN2017/090308 WO2018201594A1 (en) | 2017-05-04 | 2017-06-27 | File abnormality detection method and device, electronic device and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710307282.3A CN107291614B (en) | 2017-05-04 | 2017-05-04 | File abnormity detection method and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107291614A true CN107291614A (en) | 2017-10-24 |
| CN107291614B CN107291614B (en) | 2020-10-30 |
Family
ID=60094421
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710307282.3A Active CN107291614B (en) | 2017-05-04 | 2017-05-04 | File abnormity detection method and electronic equipment |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN107291614B (en) |
| WO (1) | WO2018201594A1 (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108563445A (en) * | 2018-03-30 | 2018-09-21 | 平安科技（深圳）有限公司 | Application code detection method and server |
| CN110796329A (en) * | 2019-09-02 | 2020-02-14 | 西安交大捷普网络科技有限公司 | Asset transaction monitoring method |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101719085A (en) * | 2009-12-23 | 2010-06-02 | 金蝶软件（中国）有限公司 | Log file processing method, device and system |
| US20120167053A1 (en) * | 2010-06-29 | 2012-06-28 | International Business Machine Corporation | Targeting code sections for correcting computer program product defects using records of a defect tracking system |
| CN104616205A (en) * | 2014-11-24 | 2015-05-13 | 北京科东电力控制***有限责任公司 | Distributed log analysis based operation state monitoring method of power system |
| CN104750604A (en) * | 2013-12-30 | 2015-07-01 | ***股份有限公司 | Generating method and device for browser compatibility test case |
| CN105938533A (en) * | 2016-03-03 | 2016-09-14 | 杭州迪普科技有限公司 | Scanning method and scanning device for system loopholes |
| CN106371983A (en) * | 2016-08-31 | 2017-02-01 | 五八同城信息技术有限公司 | Method and device for alarming based on data development |
| CN106407270A (en) * | 2016-08-25 | 2017-02-15 | 乐视控股（北京）有限公司 | File processing method and device based on terminal |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7729270B2 (en) * | 2005-01-13 | 2010-06-01 | International Business Machines Corporation | Method for supporting on-demand performance |
| CN106021358A (en) * | 2016-05-10 | 2016-10-12 | 深圳云之家网络有限公司 | Abnormal information recording method and system |
| CN106201757B (en) * | 2016-07-12 | 2020-05-26 | 网易（杭州）网络有限公司 | Exception handling method and device |
-
2017
- 2017-05-04 CN CN201710307282.3A patent/CN107291614B/en active Active
- 2017-06-27 WO PCT/CN2017/090308 patent/WO2018201594A1/en active Application Filing
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101719085A (en) * | 2009-12-23 | 2010-06-02 | 金蝶软件（中国）有限公司 | Log file processing method, device and system |
| US20120167053A1 (en) * | 2010-06-29 | 2012-06-28 | International Business Machine Corporation | Targeting code sections for correcting computer program product defects using records of a defect tracking system |
| CN104750604A (en) * | 2013-12-30 | 2015-07-01 | ***股份有限公司 | Generating method and device for browser compatibility test case |
| CN104616205A (en) * | 2014-11-24 | 2015-05-13 | 北京科东电力控制***有限责任公司 | Distributed log analysis based operation state monitoring method of power system |
| CN105938533A (en) * | 2016-03-03 | 2016-09-14 | 杭州迪普科技有限公司 | Scanning method and scanning device for system loopholes |
| CN106407270A (en) * | 2016-08-25 | 2017-02-15 | 乐视控股（北京）有限公司 | File processing method and device based on terminal |
| CN106371983A (en) * | 2016-08-31 | 2017-02-01 | 五八同城信息技术有限公司 | Method and device for alarming based on data development |
Non-Patent Citations (2)
| Title |
|---|
| HARLANC: ""谈一下我们是如何开展code review的"", 《HTTPS://WWW.CNBLOGS.COM/HARLANC/P/6772394.HTML》 * |
| ULAS YÜKSEL等: ""Automated Classification of Static Code Analysis Alerts: A Case Study"", 《2013 IEEE INTERNATIONAL CONFERENCE ON SOFTWARE MAINTENANCE》 * |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108563445A (en) * | 2018-03-30 | 2018-09-21 | 平安科技（深圳）有限公司 | Application code detection method and server |
| CN108563445B (en) * | 2018-03-30 | 2021-09-10 | 平安科技（深圳）有限公司 | Application program code detection method and server |
| CN110796329A (en) * | 2019-09-02 | 2020-02-14 | 西安交大捷普网络科技有限公司 | Asset transaction monitoring method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107291614B (en) | 2020-10-30 |
| WO2018201594A1 (en) | 2018-11-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107819627B (en) | System fault processing method and server | |
| CN112134739B (en) | Link state tracking method and device, electronic equipment and computer storage medium | |
| CN108563445B (en) | Application program code detection method and server | |
| CN109981617A (en) | A kind of internet of things equipment monitoring method, system and electronic equipment and storage medium | |
| CN106294134A (en) | The collapse localization method of code and device | |
| CN111563075B (en) | Service verification system, method and equipment and storage medium | |
| CN103279846A (en) | Project acceptance method and system based on BIM model | |
| CN112733531B (en) | Virtual resource allocation method and device, electronic equipment and computer storage medium | |
| CN113239106A (en) | Excel file export method and device, electronic equipment and storage medium | |
| CN109976823A (en) | A kind of application program launching method, device and terminal device | |
| CN114491047A (en) | Multi-label text classification method and device, electronic equipment and storage medium | |
| CN107291614A (en) | File method for detecting abnormality and electronic equipment | |
| CN107864187A (en) | The online task executing method of terminal device and server | |
| CN107492187A (en) | A kind of recognition methods, device, terminal device and storage medium for splicing paper money | |
| CN116756710B (en) | Open source treatment method and system based on feature tag tracking technology and electronic equipment | |
| CN109848052A (en) | A kind of method and terminal device of goods sorting | |
| CN108256005A (en) | Internet product monitoring method and terminal device | |
| CN107085532A (en) | Task monitor method and device | |
| CN114727100B (en) | Joint debugging method and device for monitoring equipment | |
| CN113221888B (en) | License plate number management system test method and device, electronic equipment and storage medium | |
| CN110389296A (en) | Integrated circuit product handling system method, apparatus and terminal device | |
| CN115660540A (en) | Cargo tracking method, cargo tracking device, computer equipment and storage medium | |
| CN116339882A (en) | Office system collaborative display method, device, equipment and medium based on Internet of things | |
| CN107632896A (en) | A kind of data processing method, data processing equipment and communication apparatus | |
| CN114237829A (en) | Data acquisition and processing method for power equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |