专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08935788B1 Two stage virus detection 有权
标题翻译：两级病毒检测
公开(公告)号：US08935788B1
公开(公告)日：2015-01-13
申请号：US12252205
申请日：2008-10-15
申请人： Lili Diao , Vincent Chan , Patrick Mg Lu
发明人： Lili Diao , Vincent Chan , Patrick Mg Lu
IPC分类号： G06F11/30 , G06F21/56
CPC分类号： G06F21/564 , G06F21/561
摘要： A two stage virus detection system detects viruses in target files. In the first stage, a training application receives a master virus pattern file recording all known virus patterns and generates a features list containing fundamental virus signatures from the virus patterns, a novelty detection model, a classification model, and a set of segmented virus pattern files. In the second stage, a detection application scans a target file for viruses using the generated outputs from the first stage rather than using the master virus pattern file directly to do traditional pattern matching. The results of the scan can vary in detail depending on a fuzzy scan level. For fuzzy scan level “1,” the existence of a virus is returned. For fuzzy scan level “2,” the grant virus type found is returned. For fuzzy scan level “3,” the exact virus name is returned. This invention provides a solution for the problems caused by traditional virus detection solution: slow scanning speed, big pattern file, big burden on computation resource (CPU, RAM etc.), as well as heavy pattern updating traffic via networks.
摘要翻译：两级病毒检测系统检测目标文件中的病毒。在第一阶段，训练应用程序接收记录所有已知病毒模式的主病毒模式文件，并生成包含病毒模式的基本病毒签名的功能列表，新颖性检测模型，分类模型和一组分段病毒模式文件。在第二阶段，检测应用程序使用来自第一阶段的生成输出来扫描目标文件以获取病毒，而不是直接使用主病毒码文件来进行传统的模式匹配。根据模糊扫描级别，扫描结果可能会有详细的变化。对于模糊扫描级别“1”，返回病毒的存在。对于模糊扫描级别“2”，返回发现的授权病毒类型。对于模糊扫描级别“3”，返回确切的病毒名称。本发明为传统病毒检测解决方案提供了一个解决方案：扫描速度慢，格式文件大，计算资源负担大（CPU，RAM等），以及通过网络大量更新流量。

IPRDB

热门服务

关于我们

友情链接

联系方式