CN1567118A - 一种计算机病毒检测和识别***及方法 - Google Patents
一种计算机病毒检测和识别***及方法 Download PDFInfo
- Publication number
- CN1567118A CN1567118A CN 200410022159 CN200410022159A CN1567118A CN 1567118 A CN1567118 A CN 1567118A CN 200410022159 CN200410022159 CN 200410022159 CN 200410022159 A CN200410022159 A CN 200410022159A CN 1567118 A CN1567118 A CN 1567118A
- Authority
- CN
- China
- Prior art keywords
- virus
- identification
- detection
- condition code
- viral
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 241000700605 Viruses Species 0.000 title claims abstract description 165
- 238000000034 method Methods 0.000 title claims abstract description 56
- 238000001514 detection method Methods 0.000 title claims description 48
- 238000004458 analytical method Methods 0.000 claims abstract description 4
- 230000003612 virological effect Effects 0.000 claims description 35
- 238000004422 calculation algorithm Methods 0.000 claims description 14
- 239000000284 extract Substances 0.000 claims description 8
- 238000012544 monitoring process Methods 0.000 claims description 6
- 239000000427 antigen Substances 0.000 claims description 3
- 102000036639 antigens Human genes 0.000 claims description 3
- 108091007433 antigens Proteins 0.000 claims description 3
- 238000010276 construction Methods 0.000 claims 2
- 210000000987 immune system Anatomy 0.000 abstract description 2
- 238000010494 dissociation reaction Methods 0.000 abstract 1
- 230000005593 dissociations Effects 0.000 abstract 1
- 230000008569 process Effects 0.000 description 20
- 238000012360 testing method Methods 0.000 description 5
- 238000013377 clone selection method Methods 0.000 description 3
- 230000008878 coupling Effects 0.000 description 2
- 238000010168 coupling process Methods 0.000 description 2
- 238000005859 coupling reaction Methods 0.000 description 2
- 230000007123 defense Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000010429 evolutionary process Effects 0.000 description 2
- 230000002452 interceptive effect Effects 0.000 description 2
- 230000035772 mutation Effects 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 210000001744 T-lymphocyte Anatomy 0.000 description 1
- 241000726445 Viroids Species 0.000 description 1
- 230000009471 action Effects 0.000 description 1
- 230000002155 anti-virotic effect Effects 0.000 description 1
- 210000003719 b-lymphocyte Anatomy 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 210000004027 cell Anatomy 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000008030 elimination Effects 0.000 description 1
- 238000003379 elimination reaction Methods 0.000 description 1
- 238000000605 extraction Methods 0.000 description 1
- 230000007233 immunological mechanism Effects 0.000 description 1
- 238000002386 leaching Methods 0.000 description 1
- 230000007774 longterm Effects 0.000 description 1
- 210000004698 lymphocyte Anatomy 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000002265 prevention Effects 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 230000010076 replication Effects 0.000 description 1
- 230000009897 systematic effect Effects 0.000 description 1
- 238000012549 training Methods 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
- 230000009385 viral infection Effects 0.000 description 1
Images
Landscapes
- Storage Device Security (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
Description
Claims (9)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN 200410022159 CN1235108C (zh) | 2004-03-29 | 2004-03-29 | 一种计算机病毒检测和识别方法 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN 200410022159 CN1235108C (zh) | 2004-03-29 | 2004-03-29 | 一种计算机病毒检测和识别方法 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN1567118A true CN1567118A (zh) | 2005-01-19 |
CN1235108C CN1235108C (zh) | 2006-01-04 |
Family
ID=34479932
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN 200410022159 Expired - Fee Related CN1235108C (zh) | 2004-03-29 | 2004-03-29 | 一种计算机病毒检测和识别方法 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN1235108C (zh) |
Cited By (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2007056934A1 (fr) * | 2005-11-16 | 2007-05-24 | Jie Bai | Procede pour detecter le comportement du fonctionnement d'un programme et procede pour detecter et effacer le programme contenant le virus |
CN100374972C (zh) * | 2005-08-03 | 2008-03-12 | 珠海金山软件股份有限公司 | 一种检测和防御计算机恶意程序的***和方法 |
CN100437614C (zh) * | 2005-11-16 | 2008-11-26 | 白杰 | 未知病毒程序的识别及清除方法 |
CN101887498A (zh) * | 2010-06-30 | 2010-11-17 | 南京邮电大学 | 混合式对等网络中基于免疫算法的病毒检测方法 |
CN101321164B (zh) * | 2008-07-18 | 2011-12-21 | 电子科技大学 | 一种网络免疫***及其工作机制 |
CN101414914B (zh) * | 2008-11-26 | 2012-01-25 | 北京星网锐捷网络技术有限公司 | 数据内容过滤方法与装置、有限状态自动机及其构造装置 |
CN102663285A (zh) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | 一种apk病毒特征码的提取方法及装置 |
CN102663286A (zh) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | 一种病毒apk的识别方法及装置 |
CN102708320A (zh) * | 2012-05-04 | 2012-10-03 | 奇智软件(北京)有限公司 | 一种病毒apk的识别方法及装置 |
CN102708309A (zh) * | 2011-07-20 | 2012-10-03 | 北京邮电大学 | 恶意代码自动分析方法及*** |
CN101841523B (zh) * | 2010-02-05 | 2013-05-22 | 中国科学院计算技术研究所 | 检测恶意代码样本的网络行为的方法及*** |
CN103440454A (zh) * | 2013-08-01 | 2013-12-11 | 上海交通大学 | 一种基于搜索引擎关键词的主动式蜜罐检测方法 |
CN104715199A (zh) * | 2012-03-21 | 2015-06-17 | 北京奇虎科技有限公司 | 一种病毒apk的识别方法及装置 |
CN104715200A (zh) * | 2012-05-04 | 2015-06-17 | 北京奇虎科技有限公司 | 一种病毒apk的识别方法及装置 |
CN105099834A (zh) * | 2015-09-30 | 2015-11-25 | 北京华青融天技术有限责任公司 | 一种自定义特征码的方法和装置 |
CN108563951A (zh) * | 2018-04-13 | 2018-09-21 | 腾讯科技(深圳)有限公司 | 病毒检测方法及装置 |
CN109829304A (zh) * | 2018-12-29 | 2019-05-31 | 北京奇安信科技有限公司 | 一种病毒检测方法及装置 |
CN111949982A (zh) * | 2020-07-30 | 2020-11-17 | 珠海市鸿瑞信息技术股份有限公司 | 一种基于电力协议的控制阻断隔离*** |
-
2004
- 2004-03-29 CN CN 200410022159 patent/CN1235108C/zh not_active Expired - Fee Related
Cited By (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN100374972C (zh) * | 2005-08-03 | 2008-03-12 | 珠海金山软件股份有限公司 | 一种检测和防御计算机恶意程序的***和方法 |
WO2007056934A1 (fr) * | 2005-11-16 | 2007-05-24 | Jie Bai | Procede pour detecter le comportement du fonctionnement d'un programme et procede pour detecter et effacer le programme contenant le virus |
CN100437614C (zh) * | 2005-11-16 | 2008-11-26 | 白杰 | 未知病毒程序的识别及清除方法 |
CN101321164B (zh) * | 2008-07-18 | 2011-12-21 | 电子科技大学 | 一种网络免疫***及其工作机制 |
CN101414914B (zh) * | 2008-11-26 | 2012-01-25 | 北京星网锐捷网络技术有限公司 | 数据内容过滤方法与装置、有限状态自动机及其构造装置 |
CN101841523B (zh) * | 2010-02-05 | 2013-05-22 | 中国科学院计算技术研究所 | 检测恶意代码样本的网络行为的方法及*** |
CN101887498A (zh) * | 2010-06-30 | 2010-11-17 | 南京邮电大学 | 混合式对等网络中基于免疫算法的病毒检测方法 |
CN101887498B (zh) * | 2010-06-30 | 2012-09-26 | 南京邮电大学 | 混合式对等网络中基于免疫算法的病毒检测方法 |
CN102708309A (zh) * | 2011-07-20 | 2012-10-03 | 北京邮电大学 | 恶意代码自动分析方法及*** |
CN102663286A (zh) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | 一种病毒apk的识别方法及装置 |
US9619650B2 (en) | 2012-03-21 | 2017-04-11 | Beijing Qihoo Technology Company Limited | Method and device for identifying virus APK |
CN102663285A (zh) * | 2012-03-21 | 2012-09-12 | 奇智软件(北京)有限公司 | 一种apk病毒特征码的提取方法及装置 |
CN102663286B (zh) * | 2012-03-21 | 2015-05-06 | 北京奇虎科技有限公司 | 一种病毒apk的识别方法及装置 |
CN104715199A (zh) * | 2012-03-21 | 2015-06-17 | 北京奇虎科技有限公司 | 一种病毒apk的识别方法及装置 |
US10152594B2 (en) | 2012-03-21 | 2018-12-11 | Beijing Qihoo Technology Company Limited | Method and device for identifying virus APK |
CN102708320A (zh) * | 2012-05-04 | 2012-10-03 | 奇智软件(北京)有限公司 | 一种病毒apk的识别方法及装置 |
CN102708320B (zh) * | 2012-05-04 | 2015-05-06 | 北京奇虎科技有限公司 | 一种病毒apk的识别方法及装置 |
CN104715200A (zh) * | 2012-05-04 | 2015-06-17 | 北京奇虎科技有限公司 | 一种病毒apk的识别方法及装置 |
CN103440454A (zh) * | 2013-08-01 | 2013-12-11 | 上海交通大学 | 一种基于搜索引擎关键词的主动式蜜罐检测方法 |
CN103440454B (zh) * | 2013-08-01 | 2016-04-06 | 上海交通大学 | 一种基于搜索引擎关键词的主动式蜜罐检测方法 |
CN105099834A (zh) * | 2015-09-30 | 2015-11-25 | 北京华青融天技术有限责任公司 | 一种自定义特征码的方法和装置 |
CN108563951A (zh) * | 2018-04-13 | 2018-09-21 | 腾讯科技(深圳)有限公司 | 病毒检测方法及装置 |
CN109829304A (zh) * | 2018-12-29 | 2019-05-31 | 北京奇安信科技有限公司 | 一种病毒检测方法及装置 |
CN111949982A (zh) * | 2020-07-30 | 2020-11-17 | 珠海市鸿瑞信息技术股份有限公司 | 一种基于电力协议的控制阻断隔离*** |
CN111949982B (zh) * | 2020-07-30 | 2023-08-08 | 珠海市鸿瑞信息技术股份有限公司 | 一种基于电力协议的控制阻断隔离*** |
Also Published As
Publication number | Publication date |
---|---|
CN1235108C (zh) | 2006-01-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN1235108C (zh) | 一种计算机病毒检测和识别方法 | |
CN109325351B (zh) | 一种基于众测平台的安全漏洞自动化验证*** | |
CN107180192B (zh) | 基于多特征融合的安卓恶意应用程序检测方法和*** | |
Ye et al. | IMDS: Intelligent malware detection system | |
CN108920954B (zh) | 一种恶意代码自动化检测平台及方法 | |
EP3474177B1 (en) | System and method of detecting malicious files using a trained machine learning model | |
CN111639337B (zh) | 一种面向海量Windows软件的未知恶意代码检测方法及*** | |
US20150205960A1 (en) | Method of detecting a malware based on a white list | |
US8205256B2 (en) | Apparatus for detecting intrusion code and method using the same | |
CN112866023B (zh) | 网络检测、模型训练方法、装置、设备及存储介质 | |
CN109271780A (zh) | 机器学习恶意软件检测模型的方法、***和计算机可读介质 | |
CN107645503A (zh) | 一种基于规则的恶意域名所属dga家族的检测方法 | |
CN109784056A (zh) | 一种基于深度学习的恶意软件检测方法 | |
CN105046152B (zh) | 基于函数调用图指纹的恶意软件检测方法 | |
CN108769079A (zh) | 一种基于机器学习的Web入侵检测技术 | |
JP7264631B2 (ja) | コンピュータシステムにおける不正行為を検出するためのシステム及び方法 | |
CN104933364B (zh) | 一种基于调用行为的恶意代码自动化同源判定方法及*** | |
CN103455597B (zh) | 面向海量web图像的分布式信息隐藏检测方法 | |
JP6505533B2 (ja) | 悪質なコードの検出 | |
CN113297580B (zh) | 基于代码语义分析的电力信息***安全防护方法及装置 | |
CN110704841A (zh) | 一种基于卷积神经网络的大规模安卓恶意应用检测***及方法 | |
CN112507336A (zh) | 基于代码特征和流量行为的服务端恶意程序检测方法 | |
Naidu et al. | A syntactic approach for detecting viral polymorphic malware variants | |
Fan et al. | Poster: Accuracy vs. time cost: Detecting Android malware through pareto ensemble pruning | |
Ye et al. | Intelligent file scoring system for malware detection from the gray list |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
ASS | Succession or assignment of patent right |
Owner name: SICHUAN GREAT TECHNOLOGY CO., LTD. Free format text: FORMER OWNER: SICHUAN UNIVERSITY Effective date: 20100513 |
|
COR | Change of bibliographic data |
Free format text: CORRECT: ADDRESS; FROM: 610065 NO.24, SOUTH 1ST SECTION, 1ST RING ROAD, CHENGDU CITY, SICHUAN PROVINCE TO: 610041 2/F, COMPLEX BUILDING (FACING THE STREET), CHENGDU KEHUA MIDDLE ROAD PRIMARY SCHOOL, NO.2, CHANGSHOU ROAD, WUHOU DISTRICT, CHENGDU CITY |
|
TR01 | Transfer of patent right |
Effective date of registration: 20100513 Address after: 610041, Wuhou District, Changshou Road, Chengdu No. 2 Chengdu KELONG Road Primary School Street building two floor Patentee after: Sichuan Gerite Technology Co., Ltd. Address before: 610065 Sichuan, Chengdu, South Ring Road, No. 1, No. 24 Patentee before: Sichuan University |
|
ASS | Succession or assignment of patent right |
Owner name: CHENGDU GLOBAL CAPSHEAF TECHNOLOGY CO., LTD. Free format text: FORMER OWNER: SICHUAN GREAT TECHNOLOGY CO., LTD. Effective date: 20130401 |
|
C41 | Transfer of patent application or patent right or utility model | ||
COR | Change of bibliographic data |
Free format text: CORRECT: ADDRESS; FROM: 610041 CHENGDU, SICHUAN PROVINCE TO: 610000 CHENGDU, SICHUAN PROVINCE |
|
TR01 | Transfer of patent right |
Effective date of registration: 20130401 Address after: 610000 C-411 Asia Pacific Plaza, KELONG North Road, Sichuan, Chengdu Patentee after: Chengdu century summit Technology Co., Ltd. Address before: 610041, Wuhou District, Changshou Road, Chengdu No. 2 Chengdu KELONG Road Primary School Street building two floor Patentee before: Sichuan Gerite Technology Co., Ltd. |
|
DD01 | Delivery of document by public notice |
Addressee: Wang Zhengtao Document name: Notification of Passing Examination on Formalities |
|
CF01 | Termination of patent right due to non-payment of annual fee | ||
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20060104 Termination date: 20180329 |