Malware detection system and method based on p2p dynamic cloud

Abstract

The present invention relates to a malicious software detection system and method based on P2P dynamic cloud, including a single solid-state cloud server, multiple dynamic cloud servers and multiple distributed terminals, a P2P network is formed between the dynamic cloud servers, and the solid-state cloud server and dynamic Cloud servers form a C / S network, and dynamic cloud servers and distributed terminals form a C / S network. Distributed terminals are used for abnormal monitoring of software behavior in the network, obtain abnormal behavior characteristics, and upload them to dynamic cloud servers; The server is used to analyze the abnormal behavior characteristics, and the analysis results are fed back to the distributed terminal or uploaded to the solid cloud server; the solid cloud server is used to further analyze the abnormal behavior characteristics uploaded by the dynamic cloud server, and the analysis results are passed through the dynamic The cloud server feeds back to the distributed terminals. It is designed to reduce the load on cloud servers, improve the response speed of client requests and improve the detection accuracy of unknown malware.

Description

technical field [0001] The invention relates to the field of malware detection, in particular to a P2P dynamic cloud-based malware detection system and method. Background technique [0002] With the rapid development of information technology, the network has gradually become the main way for people to communicate. However, while the network is disseminating some advanced tools and technologies, malicious software has also begun to appear. Almost all Internet users' computers have been invaded by malicious software without knowing it. Malware has gradually become the main threat to the network. [0003] On December 25, 2014, McAfee released the "McAfee Threat Report for the Third Quarter of 2014", which showed that in the third quarter, McAfee Labs detected more than 307 new threats every minute. , more than 5 per second. This quarter, the number of mobile malware samples increased by 16%, and the number of overall malware surged by 76% year-on-year; the number of ransomwa...

AI Technical Summary

Problems solved by technology

"Cloud security" uses the transmission and computing functions of the Internet to transfer the analysis and computing capabilities originally placed on the client side to the server side. Although it largely makes up for the shortcomings of the traditional virus detection and killing mechanism, it also greatly increases the cloud server. workload, resulting in slow responses to client requests

Images