CN103927479B - One looks into viricidal method and device - Google Patents
One looks into viricidal method and device Download PDFInfo
- Publication number
- CN103927479B CN103927479B CN201310008632.8A CN201310008632A CN103927479B CN 103927479 B CN103927479 B CN 103927479B CN 201310008632 A CN201310008632 A CN 201310008632A CN 103927479 B CN103927479 B CN 103927479B
- Authority
- CN
- China
- Prior art keywords
- file
- killing
- interval
- write
- reference interval
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Abstract
The embodiment of the invention discloses one and look into viricidal method, including: when at least one file in disk is performed killing operation, record fileinfo and the disk read-write block information of described killing operation of described file；It is analyzed processing to disk read-write block information during file described in the fileinfo of described file and killing, it is thus achieved that caching reference interval；File in described caching reference interval is loaded onto in internal memory, and when receiving killing request, the file reading caching from internal memory performs killing operation.The embodiment of the invention also discloses one and look into viricidal device.Use the present invention, it is possible to decrease disk read-write amount during virus killing, promote and look into viricidal efficiency.
Description
Technical field
The present invention relates to Internet technical field, particularly relate to one and look into viricidal method and device.
Background technology
Along with the development of the Internet is with universal, increasing user begins to use the Internet.But the environment of the Internet and resource are not the safest, if user terminal has infected virus, terminal system paralysis or hardware damage may be caused, even cause the leakage of private information of user to cause the safety of person property.Therefore people's problem pay attention to day by day to network security.Existing virus method includes static defence and dynamic security two large divisions, and the two part is the foundation stone of antagonism virus disseminating.The technology that wherein static defence is more basic during being again virus killing, some primary abilities of dynamic security are also required to static defence to be provided and strengthens.And in static state is defendd, the performance of antivirus engine is the most important thing.The performance of tolerance antivirus engine has a lot of metric, such as virus recall rate, checking and killing virus rate, checking and killing virus efficiency etc., and one of them the most crucial metric is exactly checking and killing virus efficiency.When carrying out killing virus, antivirus engine needs to take into account disk read-write and calculating, and therefore, in existing antivirus engine, disk read-write, as the key factor of checking and killing virus efficiency, becomes the performance bottleneck of existing antivirus engine.
Current virus method, by caching treat killing file to internal memory, then in internal memory killing this treat killing file, thus reduce disk read-write amount during follow-up killing.The most just checking and killing virus efficiency can be improved.In this fashion, owing to the capacity of internal memory is limited, the most only virus document being cached to internal memory, for normal files a large amount of present on user terminal, if cache, caching which file does not all have clear and definite guidance method in internal memory.The most existing virus method is the longest, and killing efficiency is low.
Summary of the invention
Embodiment of the present invention technical problem to be solved is, it is provided that one looks into viricidal method and device.Disk read-write amount during virus killing can be reduced, promote and look into viricidal efficiency.
In order to solve above-mentioned technical problem, embodiments provide one and look into viricidal method, including:
When at least one file in disk is performed killing operation, record fileinfo and the disk read-write block information of described killing operation of described file；
It is analyzed processing to disk read-write block information during file described in the fileinfo of described file and killing, it is thus achieved that caching reference interval；
File in described caching reference interval is loaded onto in internal memory, and when receiving killing request, the file reading caching from internal memory performs killing operation.
Correspondingly, the embodiment of the present invention additionally provides one and looks into viricidal device, including:
Killing unit, for performing killing operation at least one file in disk；
Record unit, for when described killing unit performs killing operation at least one file in disk, records fileinfo and the disk read-write block information of described killing operation of described file；
Processing unit, disk read-write block information when being used for file described in the fileinfo to described file and killing is analyzed processing, it is thus achieved that caching reference interval；
Buffer unit, for being loaded onto in internal memory by the file in described caching reference interval, and when described killing unit receives killing request, the file indicating described killing unit to read caching from internal memory performs killing operation.
Implement the embodiment of the present invention, have the advantages that
The fileinfo of log file and disk read-write block information analyze and process when killing file, obtain caching reference interval so that again during killing, can be in advance by the file cache in caching reference interval to internal memory, specify that the data of caching, improve and look into viricidal efficiency；By file being classified and according to the temperature of file, the reading attributes of antivirus engine, the suitable cache file of cache miss data decimation of terminal to report, have compressed the scope of caching reference interval, improve the hit rate of cache file；By judging that the file size caching reference interval the most rationally thus repeats to be compressed caching reference interval, reduce the storage pressure of internal memory, promote on the premise of not affecting process performance and look into viricidal efficiency；When cache file is miss, interval corresponding for miss file is merged into caching reference interval, the most perfect caching reference interval, improve the hit rate of cache file.
Accompanying drawing explanation
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, the accompanying drawing used required in embodiment or description of the prior art will be briefly described below, apparently, accompanying drawing in describing below is only some embodiments of the present invention, for those of ordinary skill in the art, on the premise of not paying creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the schematic flow sheet that the present invention looks into the first embodiment of viricidal method；
Fig. 2 is the schematic flow sheet that the present invention looks into the second embodiment of viricidal method；
Fig. 3 is the schematic flow sheet that the present invention looks into the 3rd embodiment of viricidal method；
Fig. 4 is the schematic flow sheet that the present invention looks into the 4th embodiment of viricidal method；
Fig. 5 is the composition schematic diagram that the present invention looks into the first embodiment of viricidal device；
Fig. 6 is the composition schematic diagram that the present invention looks into the second embodiment of viricidal device；
Fig. 7 is the composition schematic diagram that the present invention looks into the 3rd embodiment of viricidal device；
Fig. 8 is the composition schematic diagram that the present invention looks into the 4th embodiment of viricidal device.
Detailed description of the invention
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, it is clear that described embodiment is only a part of embodiment of the present invention rather than whole embodiments.Based on the embodiment in the present invention, the every other embodiment that those of ordinary skill in the art are obtained under not making creative work premise, broadly fall into the scope of protection of the invention.
Refer to Fig. 1, look into the schematic flow sheet of the first embodiment of viricidal method for the present invention, in the present embodiment, said method comprising the steps of:
S101, when at least one file in disk performs killing operation, records fileinfo and the disk read-write block information of described killing operation of described file.
Specifically, the fileinfo of described file includes:
The type of described file, the hash of described file；
Wherein, the type of described file is used for classifying the All Files of killing and adding up the disk read-write interval of files in different types；
The hash of described file is for verifying correctness and the integrity of described file.
Certainly, the fileinfo of described file can also include but not limited to other attribute informations such as version number of file, if shell adding, if compression etc..
S102, is analyzed processing to disk read-write block information during file described in the fileinfo of described file and killing, it is thus achieved that caching reference interval.
S103, is loaded onto the file in described caching reference interval in internal memory, and when receiving killing request, the file reading caching from internal memory performs killing operation.
By the fileinfo of the log file when killing file and disk read-write block information and analyze and process, obtain caching reference interval so that again during killing, can be in advance by the file cache in caching reference interval to internal memory, specify that the data of caching, improve and look into viricidal efficiency.
Refer to Fig. 2, look into the schematic flow sheet of the second embodiment of viricidal method for the present invention, in the present embodiment, said method comprising the steps of:
S201, when at least one file in disk performs killing operation, records fileinfo and the disk read-write block information of described killing operation of described file.
S202, classifies to All Files according to the type of file.
Usually, its disk read-write of different types of file is interval general different.Disk read-write interval such as image class file and compressed file is significantly different, if different types of file is used identical process, it will affect the accuracy of further cache reference interval analytical calculation.
S203, to different types of file, according to the temperature of file, the reading attributes of antivirus engine, terminal to report cache miss data at least one choose cache file.
Specifically, use the file temperature that frequency is high high, use the file temperature that frequency is low low；For the file that temperature is high, the disk read-write of its correspondence is interval it is generally required to pay the utmost attention to, and then can be added without in caching for lower grade file.When especially the disk read-write interval at high temperature file Yu low temperature file clashes, it should preferentially accept and believe high temperature file.Usually, a heat degree threshold can be pre-set for representing the access times of file in Preset Time, judge that when reaching this heat degree threshold this document is as high temperature file.
The reading attributes of described antivirus engine is the antivirus engine reading frequency to each interval of disk.Such as, frequently reading will be done in some interval of disk by some antivirus engines, then can the data in this interval be joined in caching reference interval.
For the data not having in caching reference interval, when terminal to report, it is also possible to interval by its correspondence adds reference buffer storage interval.
Just a series of disk read-write can be obtained by one or more above screening criterias interval after being screened.
S204, merges disk read-write interval corresponding to described cache file and obtains described caching reference interval.
S205, is loaded onto the file in described caching reference interval in internal memory, and when receiving killing request, the file reading caching from internal memory performs killing operation.
The analysis and processing method described by the present embodiment, disk corresponding to the most frequently used file can be obtained and read interval, the caching reference interval that will obtain after these interval merging, hit rate is higher, can be obviously improved and look into viricidal efficiency while reducing memory storage pressure.
Refer to Fig. 3, look into the schematic flow sheet of the 3rd embodiment of viricidal method for the present invention, in the present embodiment, said method comprising the steps of:
S301, when at least one file in disk performs killing operation, records fileinfo and the disk read-write block information of described killing operation of described file.
S302, classifies to All Files according to the type of file.
S303, to different types of file, according to the temperature of file, the reading attributes of antivirus engine, terminal to report cache miss data at least one choose cache file.
S304, merges disk read-write interval corresponding to described cache file and obtains described caching reference interval.
S305, it is judged that whether the file size in described caching reference interval exceedes predetermined threshold value.
Usually, the memory capacity of internal memory is limited, if reduction is too much processed the performance of part by the file of caching, affect the fluency of whole killing process, therefore, introducing rational judgment mechanism, the size controlling caching reference interval has a very important role for controlling killing efficiency.
S306, file in described caching reference interval is performed killing operation, record fileinfo and the disk read-write block information of described killing operation of described file, it is analyzed processing, until the file size in described caching reference interval meets the requirement of predetermined threshold value to disk read-write block information during file described in the fileinfo of described file and killing.
Herein, the method giving further compressed cache reference interval, the file in caching reference interval is carried out killing, record, analyze and process and obtain more reasonably caching reference interval until file size in described caching reference interval meets the requirement of predetermined threshold value by constantly circulation.The most just the effect promoting killing virus efficacy on the premise of not affecting systematic entirety energy is achieved.
S307, is loaded onto the file in described caching reference interval in internal memory, and when receiving killing request, the file reading caching from internal memory performs killing operation.
Refer to Fig. 4, look into the schematic flow sheet of the 4th embodiment of viricidal method for the present invention, in the present embodiment, said method comprising the steps of:
S401, when at least one file in disk performs killing operation, records fileinfo and the disk read-write block information of described killing operation of described file.
S402, classifies to All Files according to the type of file.
S403, to different types of file, according to the temperature of file, the reading attributes of antivirus engine, terminal to report cache miss data at least one choose cache file.
S404, merges disk read-write interval corresponding to described cache file and obtains described caching reference interval.
S405, it is judged that whether the file size in described caching reference interval exceedes predetermined threshold value.
S406, file in described caching reference interval is performed killing operation, record fileinfo and the disk read-write block information of described killing operation of described file, it is analyzed processing, until the file size in described caching reference interval meets the requirement of predetermined threshold value to disk read-write block information during file described in the fileinfo of described file and killing.
S407, is loaded onto the file in described caching reference interval in internal memory, and when receiving killing request, it is judged that whether internal memory exists and treats killing file.
S408, treat that killing file carries out killing described in directly reading from disk, and disk read-write until described in the fileinfo of killing file and killing until killing file time described in recording is interval, disk read-write interval when the killing file described in killing is incorporated into described caching reference interval.
Although substantially increased the hit rate of caching by preceding method, but throw away and be not excluded in existing reference buffer storage interval there is miss file.Treat whether killing file exists by judgement, if not existing, then directly reading and killing from disk, the corresponding disk read-write interval of these miss files is merged in reference buffer storage interval by the mode being simultaneously introduced parallel increase, it is achieved interval the most perfect of reference buffer storage.If now the file size in reference buffer storage interval exceedes predetermined threshold value, then can according to the type of file, temperature, antivirus engine the factor such as reading attributes as reference, carry out deleting by some the unexpected winner files in reference buffer storage interval thus keep the most interval size.
S409, directly reads and killing from internal memory.
Refer to Fig. 5, look into the composition schematic diagram of the first embodiment of viricidal device for the present invention, in the present embodiment, described device includes: killing unit 100, record unit 200, processing unit 300 and buffer unit 400.
Described killing unit 100 for performing killing operation at least one file in disk；
Described record unit 200, for when described killing unit 100 performs killing operation at least one file in disk, records fileinfo and the disk read-write block information of described killing operation of described file；
Disk read-write block information when described processing unit 300 is used for file described in the fileinfo to described file and killing is analyzed processing, it is thus achieved that caching reference interval；
Described buffer unit 400 is for being loaded onto the file in described caching reference interval in internal memory, and when described killing unit 100 receives killing request, the file indicating described killing unit 100 to read caching from internal memory performs killing operation.
Refer to Fig. 6, look into the composition schematic diagram of the second embodiment of viricidal device for the present invention, in the present embodiment, described device includes: killing unit 100, record unit 200, processing unit 300 and buffer unit 400.
Described processing unit 300 includes: classification subelement 310, choose subelement 320, merge subelement 330.
All Files is classified by described classification subelement 310 for the type according to file；
Described subelement 320 of choosing for different types of file, according to the temperature of file, the reading attributes of antivirus engine, terminal to report cache miss data at least one choose cache file；
Described merging subelement 330 obtains described caching reference interval for merging disk read-write interval corresponding to described cache file；
Wherein, use the file temperature that frequency is high high, use the file temperature that frequency is low low；The reading attributes of described antivirus engine is the antivirus engine reading frequency to each interval of disk.
Refer to Fig. 7, look into the composition schematic diagram of the 3rd embodiment of viricidal device for the present invention, in the present embodiment, described device includes: killing unit 100, record unit 200, processing unit 300, buffer unit 400 and the first judging unit 500.
Described first judging unit 500 is used at described merging subelement 330 after merging disk read-write interval corresponding to described cache file and obtaining described caching reference interval, it is judged that whether the file size in described caching reference interval exceedes predetermined threshold value；
If, then indicate described killing unit 100 that the file in described caching reference interval performs killing operation, described record unit 200 is indicated to record fileinfo and the disk read-write block information of described killing operation of described file, described processing unit 300 is indicated to be analyzed processing, until the file size in described caching reference interval meets the requirement of predetermined threshold value to disk read-write block information during file described in the fileinfo of described file and killing.
Refer to Fig. 8, the composition schematic diagram of the 4th embodiment of viricidal device is looked into for the present invention, in the present embodiment, described device includes: killing unit 100, record unit 200, processing unit 300, buffer unit the 400, first judging unit 500 and the second judging unit 600.
Described second judging unit 600 is used for being loaded onto in internal memory by the file in described caching reference interval at described buffer unit 400, and when described killing unit 100 receives killing request, it is judged that whether internal memory exists and treats killing file；
If not existing, described killing unit 100 is then indicated directly to treat that killing file carries out killing described in reading from disk, and indicate described record unit 200 record described in disk read-write until described in the fileinfo of killing file and killing until killing file time interval, indicate described processing unit 300 that disk read-write interval when the killing file described in killing is incorporated into described caching reference interval.
It should be noted that each embodiment in this specification all uses the mode gone forward one by one to describe, what each embodiment stressed is the difference with other embodiments, and between each embodiment, identical similar part sees mutually.For device embodiment, due to itself and embodiment of the method basic simlarity, so describe is fairly simple, relevant part sees the part of embodiment of the method and illustrates.
By the description of above-described embodiment, the invention have the advantages that
The fileinfo of log file and disk read-write block information analyze and process when killing file, obtain caching reference interval so that again during killing, can be in advance by the file cache in caching reference interval to internal memory, specify that the data of caching, improve and look into viricidal efficiency；By file being classified and according to the temperature of file, the reading attributes of antivirus engine, the suitable cache file of cache miss data decimation of terminal to report, have compressed the scope of caching reference interval, improve the hit rate of cache file；By judging that the file size caching reference interval the most rationally thus repeats to be compressed caching reference interval, reduce the storage pressure of internal memory, promote on the premise of not affecting process performance and look into viricidal efficiency；When cache file is miss, interval corresponding for miss file is merged into caching reference interval, the most perfect caching reference interval, improve the hit rate of cache file.
One of ordinary skill in the art will appreciate that all or part of flow process realizing in above-described embodiment method, can be by computer program and complete to instruct relevant hardware, described program can be stored in a computer read/write memory medium, this program is upon execution, it may include such as the flow process of the embodiment of above-mentioned each method.Wherein, described storage medium can be magnetic disc, CD, read-only store-memory body (Read-Only
Memory, is called for short ROM) or random store-memory body (Random
Access Memory, is called for short RAM) etc..
The above disclosed present pre-ferred embodiments that is only, certainly can not limit the interest field of the present invention, the equivalent variations therefore made according to the claims in the present invention with this, still belong to the scope that the present invention is contained.
Claims (10)
1. look into viricidal method for one kind, it is characterised in that including:
When at least one file in disk is performed killing operation, record fileinfo and the institute of described file
Stating the disk read-write block information of killing operation, described fileinfo includes file type；
According to file type, All Files is classified, to different types of file, according to the temperature of file, kill
Poison the reading attributes of engine, terminal to report cache miss data at least one choose cache file,
Merge disk read-write interval corresponding to described cache file and obtain described caching reference interval；
File in described caching reference interval is loaded onto in internal memory, and when receiving killing request, from
The file reading caching in internal memory performs killing operation.
2. the method for claim 1, it is characterised in that the fileinfo of described file includes:
The type of described file, the hash of described file；
Wherein, the type of described file is for classifying to the All Files of killing and add up dissimilar literary composition
The disk read-write of part is interval；
The hash of described file is for verifying correctness and the integrity of described file.
3. method as claimed in claim 2, it is characterised in that use the file temperature that frequency is high high, make
The file temperature low by frequency is low；The reading attributes of described antivirus engine is that antivirus engine is to each interval of disk
Reading frequency.
4. method as claimed in claim 3, it is characterised in that merging the magnetic that described cache file is corresponding
After dish read-write interval obtains described caching reference interval, also include:
Judge whether the file size in described caching reference interval exceedes predetermined threshold value；
The file in the most described caching reference interval is performed killing operation, records the literary composition of described file
Part information and the disk read-write block information of described killing operation, fileinfo and the killing institute to described file
Disk read-write block information when stating file is analyzed processing, until the file in described caching reference interval
Capacity meets the requirement of predetermined threshold value.
5. the method as described in any one of claim 1-4, it is characterised in that by described caching reference interval
Interior file is loaded onto in internal memory, and when receiving killing request, the file reading caching from internal memory is held
Row killing operates, including:
File in described caching reference interval is loaded onto in internal memory, and when receiving killing request, sentences
Whether disconnected internal memory exists and treats killing file；
If not existing, then from disk, directly described in reading, treat that killing file carries out killing, and treat described in record
Described in the fileinfo of killing file and killing, the disk read-write when killing file is interval, treats described in killing
Disk read-write interval during killing file is incorporated into described caching reference interval.
6. look into viricidal device for one kind, it is characterised in that including:
Killing unit, for performing killing operation at least one file in disk；
Record unit, is used for when described killing unit performs killing operation at least one file in disk,
Record fileinfo and the disk read-write block information of described killing operation, the described fileinfo of described file
Including file type；
Processing unit, for All Files being classified according to file type, to different types of file, according to
The temperature of file, the reading attributes of antivirus engine, terminal to report cache miss data at least one
Choose cache file, merge disk read-write interval corresponding to described cache file and obtain described caching reference interval；
Buffer unit, for being loaded onto in internal memory by the file in described caching reference interval, and looks into described
Kill unit receive killing request time, indicate described killing unit read from internal memory caching file perform look into
Kill operation.
7. device as claimed in claim 6, it is characterised in that the fileinfo of described file includes:
The type of described file, the hash of described file；
Wherein, the type of described file is for classifying to the All Files of killing and add up dissimilar literary composition
The disk read-write of part is interval；
The hash of described file is for verifying correctness and the integrity of described file.
8. device as claimed in claim 7, it is characterised in that use the file temperature that frequency is high high, make
The file temperature low by frequency is low；The reading attributes of described antivirus engine is that antivirus engine is to each interval of disk
Reading frequency.
9. device as claimed in claim 8, it is characterised in that described device also includes:
First judging unit, for merging, at described merging subelement, the disk reading that described cache file is corresponding
Write after interval obtains described caching reference interval, it is judged that whether the file size in described caching reference interval
Exceed predetermined threshold value；
If, it indicates that described killing unit performs killing operation to the file in described caching reference interval,
Indicate the fileinfo of file described in described recording unit records and the disk read-write interval letter of described killing operation
Breath, indicates described processing unit to disk read-write district during file described in the fileinfo of described file and killing
Between information be analyzed process, until the file size in described caching reference interval meet predetermined threshold value want
Ask.
10. the device as described in any one of claim 6-9, it is characterised in that described device also includes:
Second judging unit, for being loaded onto the file in described caching reference interval at described buffer unit
In internal memory, and when described killing unit receives killing request, it is judged that whether internal memory exists and treats killing literary composition
Part；
If not existing, it indicates that described killing unit directly treats that killing file is looked into described in reading from disk
Kill, and indicate and treat described in described recording unit records described in the fileinfo of killing file and killing, to treat killing literary composition
Disk read-write during part is interval, indicates described processing unit by disk read-write when the killing file described in killing
Interval is incorporated into described caching reference interval.
Priority Applications (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310008632.8A CN103927479B (en) | 2013-01-10 | One looks into viricidal method and device | |
| PCT/CN2013/087166 WO2014107991A1 (en) | 2013-01-10 | 2013-11-14 | Method and device for anti-virus scanning |
| US14/419,275 US9325736B2 (en) | 2013-01-10 | 2013-11-14 | Method and device for anti-virus scanning |
| HK15100424.9A HK1199966A1 (en) | 2013-01-10 | 2015-01-15 | Method and device for anti-virus scanning |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310008632.8A CN103927479B (en) | 2013-01-10 | One looks into viricidal method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103927479A CN103927479A (en) | 2014-07-16 |
| CN103927479B true CN103927479B (en) | 2016-11-30 |
Family
ID=
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1409222A (en) * | 2001-09-14 | 2003-04-09 | 北京瑞星科技股份有限公司 | Computer memory virus monitoring method and method for operation with virus |
| US7591019B1 (en) * | 2009-04-01 | 2009-09-15 | Kaspersky Lab, Zao | Method and system for optimization of anti-virus scan |
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1409222A (en) * | 2001-09-14 | 2003-04-09 | 北京瑞星科技股份有限公司 | Computer memory virus monitoring method and method for operation with virus |
| US7591019B1 (en) * | 2009-04-01 | 2009-09-15 | Kaspersky Lab, Zao | Method and system for optimization of anti-virus scan |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112019521B (en) | Asset scoring method and device, computer equipment and storage medium | |
| RU2589310C2 (en) | System and method of calculating interval of repeated determination of categories of network resource | |
| CN108763031A (en) | A kind of threat information detection method and device based on daily record | |
| KR102534334B1 (en) | Detection of software attacks on processes in computing devices | |
| CN104750534B (en) | The method, apparatus and system that triggering virtual machine is examined oneself | |
| US11050777B2 (en) | Method and system for remediating cybersecurity vulnerabilities based on utilization | |
| US20200162498A1 (en) | Cybersecurity vulnerability classification and remediation based on network utilization | |
| CN106897141A (en) | The processing method and processing device of information | |
| CN105607986A (en) | Acquisition method and device of user behavior log data | |
| CN104794228A (en) | Search result providing method and device | |
| US20180181338A1 (en) | Information processing apparatus, information processing system and information processing method | |
| CN109492406A (en) | Monitor the methods, devices and systems of kernel loophole attack | |
| CN106020722A (en) | Method, device and system for deduplication of repeated data of cloud storage system | |
| US10152383B2 (en) | Expedited device backup, wipe, and enrollment | |
| Shu et al. | Why data deletion fails? A study on deletion flaws and data remanence in Android systems | |
| KR101905771B1 (en) | Self defense security server with behavior and environment analysis and operating method thereof | |
| EP2811410A1 (en) | Monitoring record management method and device | |
| CN105550573B (en) | The method and apparatus for intercepting bundled software | |
| US10762203B2 (en) | Reducing impact of malware/ransomware in caching environment | |
| CN103927479B (en) | One looks into viricidal method and device | |
| WO2014107991A1 (en) | Method and device for anti-virus scanning | |
| CN110471764A (en) | A kind of processing method and processing device of memory cleaning | |
| US11507656B2 (en) | Ransomware detection and remediation | |
| CN109190376A (en) | A kind of Web page wooden horse detecting method, system and electronic equipment and storage medium | |
| US10878104B2 (en) | Automated multi-credential assessment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20230713 Address after: 518057 Tencent Building, No. 1 High-tech Zone, Nanshan District, Shenzhen City, Guangdong Province, 35 floors Patentee after: TENCENT TECHNOLOGY (SHENZHEN) Co.,Ltd. Patentee after: TENCENT CLOUD COMPUTING (BEIJING) Co.,Ltd. Address before: 2, 518057, East 403 room, SEG science and Technology Park, Zhenxing Road, Shenzhen, Guangdong, Futian District Patentee before: TENCENT TECHNOLOGY (SHENZHEN) Co.,Ltd. |