A method for dynamic maintenance of sample database based on cloud

Abstract

The invention provides a dynamic maintenance method of a sample database based on cloud. At first a client terminal computer collects program characteristics and program behaviors corresponding with the program characteristics, and sends the program characteristics and the program behaviors to a server end. Then different program characteristics and the program behaviors corresponding with the program characteristics and a black / white list are recorded in a database of the server end. Combined with the program characteristics and the program behaviors corresponding with the program characteristics of an existing black / white list, characteristics and behaviors of an unknown program are analyzed to update the black / white list. According to the dynamic maintenance method of the sample database based on the cloud, due to the fact that the program behaviors are collected and are related to the program characteristics, the program characteristics and the program behaviors corresponding with the program characteristics of the samples are analyzed and concluded in the database, and therefore the dynamic maintenance method of the sample database based on the cloud is capable of facilitating classification distinguishing of the black list and the white list for software or a program, and capable of formulating corresponding removing or recovering measurements of malicious software of the black list.

Description

[0001] The patent application of the present invention is a divisional application of the Chinese invention patent application with the filing date of August 18, 2010, the application number of 201010256958.9, and the name of "a cloud-based sample database dynamic maintenance method". technical field [0002] The invention relates to the technical field of information security, in particular to a method for dynamically maintaining a sample database based on cloud security. Background technique [0003] With the widespread use of computer technology in various fields of social life, malicious programs (Malwar, malicious software, refers to any software program deliberately created to perform unauthorized and usually harmful behaviors) have also followed like their accessories. Due to the infectivity, replicability and destructiveness of these malicious programs, they have become a major problem that plagues computer use. Therefore, in today's soaring network threats, updating ...

AI Technical Summary

Problems solved by technology

Due to the infectivity, replicability and destructiveness of these malicious programs, they have become a major problem that plagues computer use. Therefore, in today's soaring network threats, updating virus signatures has become a daily must for enterprises and Internet users. From once a week to once a day, until it is updated all the time, while the traditional antivirus software puts the virus database on the client computer, analyzes the files on the client, and repeatedly compares it with the local virus database during the scanning process. It takes up a lot of system resources, and with the continuous upgrade of the virus database, the capacity of the virus database is getting larger and larger, and the time spent analyzing files is also getting longer and longer, making the client computer slower and slower. Therefore, the anti-virus industry New technological breakthroughs must be found

Images