Malicious file detection method and device, computer equipment and storage medium

Abstract

The invention discloses a malicious file detection method and device, computer equipment and a storage medium, relates to the technical field of information, and mainly aims at relieving the calculation pressure of malicious file detection. The method comprises the steps of obtaining a calling interface sequence corresponding to a to-be-detected file; determining a feature sequence corresponding to the calling interface sequence, and determining a minimum hash signature corresponding to the to-be-detected file according to the feature sequence; according to the minimum Hash signature corresponding to the to-be-detected file, distributing the to-be-detected file to corresponding Hash buckets under different Hash intervals, wherein a plurality of Hash buckets exist in any Hash interval; determining a first target sample file which is distributed to the same hash bucket with the to-be-detected file in the different hash intervals; and judging whether the to-be-detected file is a malicious file or not according to the category information corresponding to the first target sample file. The method and the device are suitable for malicious file detection.

Description

technical field [0001] The present invention relates to the field of information technology, in particular to a malicious file detection method, device, computer equipment and storage medium. Background technique [0002] With the development of network technology and the popularization of personal computers, various Trojan horses, worms, viruses and other malicious files and their variants that endanger the normal use of users and seek illegal benefits are increasing, and there are countless new unknown malicious files. Some of these malicious files can steal personal information, passwords, documents, etc. that users have used on the device, some can hijack user devices to form a botnet, and some harass or induce user operations through various advertisements and subscription information to cause personal property losses and so on. Therefore, it is very important to effectively identify malicious files to ensure system security. [0003] Currently, machine learning or dee...

AI Technical Summary

Problems solved by technology

However, machine learning or deep learning methods need to build a detection model in advance. In order to ensure the detection accuracy of the model, a large number of sample features need to be constructed for training. The entire detection cycle of malicious files is long, which affects the detection efficiency of malicious files

Images