System and method for malicious code analysis based on cloud computing

Abstract

The invention relates to a malicious code analysis method, in particular to a system and method for malicious code analysis based on cloud computing. The system for malicious code analysis based on cloud computing comprises a malicious code analysis proxy and a malicious code could analysis system. The malicious code analysis proxy comprises a safety monitoring engine, a searching and killing engine, a local black list, a local white list, a behavior pattern bank and a virus characteristic bank. The malicious code could analysis system comprises a characteristic judging and searching engine, a sample storage center, multiple analysis engines, a global black list, a global white list, a global malicious behavior characteristic bank and a global virus characteristic bank. According to the system and method for malicious code analysis based on cloud computing, safety servitization is achieved based on the cloud computing technology, compatibility and cooperation of the multiple searching, killing and analysis engines are achieved, the threat analysis and response ability of the whole network is improved through the strong data processing and analysis ability of a cloud terminal, rapid discovery, rapid analysis and rapid processing of host threats are achieved, the safety of the host operation environment is guaranteed powerfully, and the self-protection ability of a host intrusion detection protective system can also be improved.

Description

technical field [0001] The invention relates to a malicious code analysis method, in particular to a cloud computing-based malicious code analysis system and method. Background technique [0002] As the carrier of the information system, the terminal is the initiator of actual operations and network behaviors, as well as the storage body of sensitive information such as key files and data, and often becomes the primary target of attackers to attack or hijack. With the rapid development of information technology and the continuous expansion of network scale, the use of malicious codes to target malicious attacks and sabotages on terminals is becoming more and more frequent, and the attack intensity is increasing. By monitoring the status and behavior of terminal computing resources in real time, timely detection of malicious code is of great significance to ensure the normal operation of computers and networks. [0003] At present, the malicious code analysis system for the ...

AI Technical Summary

Problems solved by technology

[0010] The purpose of the present invention is to provide a malicious code analysis system and method based on cloud computing, which solves the problems of lagging threat recognition ability, weak quick response ability and large host resource consumption of the current malicious code analysis system

Images