Virus file identification method and device, storage medium and electronic device

Abstract

The invention discloses a virus file identification method and device, a storage medium and an electronic device. The method comprises the steps that a sample record is acquired, and characteristic values of a program file which initiates access on an intelligent terminal on multiple characteristic dimensions are recorded in the sample record; sample records are clustered to obtain a sample set, and sample records of the same type are stored in the sample set; searching a target sample record with the same feature value on a target feature dimension in the sample set, the plurality of featuredimensions including the target feature dimension; and under the condition that the similarity between the program file recorded in the target sample record and the known virus file of the target typereaches a first threshold, taking the program file recorded in the target sample record as the virus file of the target type. According to the invention, the technical problem of relatively low virusidentification accuracy in related technologies is solved.

Description

Technical field [0001] The present invention relates to the Internet field, and in particular to a method and device for identifying virus files, a storage medium, and an electronic device. Background technique [0002] Network viruses (also called viruses) refer to computer instructions or program codes that are compiled or inserted into computer programs that destroy computer functions or destroy data, affect the use of the computer and can replicate itself. [0003] Anti-virus software is a type of software used to eliminate computer threats such as computer viruses, Trojan horses, and malware. Anti-virus software monitors and scans the disk in real time, and compares the data flowing in the memory with the signature of the virus database it carries. To judge whether it is a virus, to remove the virus, to protect the computer, the current virus detection software mainly uses virus characteristics to identify malicious software. These virus characteristics are analyzed from the m...

AI Technical Summary

Problems solved by technology

[0003] Anti-virus software is a type of software used to eliminate computer threats such as computer viruses, Trojan horses and malware. Anti-virus software monitors and scans disks in real time, and streams Compare the processed data with the characteristic codes of the virus database carried by itself to determine whether it is a virus, remove the virus, and protect the computer. The current virus scanning and killing software mainly uses virus characteristics to identify malicious software. These virus characteristics are derived from existing If a new virus appears from the analysis of the collected malicious samples, it cannot be accurately identified if the virus killing software has not collected the new virus

[0004] For the above problems, no effective solution has been proposed

Images