利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

4 条记录 (耗时 0.009 秒)

    System and method for correcting antivirus records to minimize false malware detections
    2.
    发明公开
    System and method for correcting antivirus records to minimize false malware detections 有权
    系统和方法修正杀毒条目减少恶意软件的错误检测

    公开(公告)号：EP2790122A3

    公开(公告)日：2014-11-05

    申请号：EP14176048.8

    申请日：2012-04-20

    申请人： Kaspersky Lab, ZAO

    发明人： Romanenko, Alexander A. ,  Lapushkin, Anton S. ,  Ishanov, Oleg A.

    IPC分类号： G06F21/56 ,  H04L29/06

    CPC分类号： H04L63/145 ,  G06F21/56 ,  G06F21/561 ,  G06F21/568

    摘要： Disclosed is a computer-implemented method for malware detection. The method comprises analyzing by an antivirus application (310) a software object (200) for presence of malware; retrieving from an antivirus database (160) of the antivirus application (310) an antivirus record associated with the analyzed object (200), wherein the antivirus record identifies the object (200) as malicious and wherein the antivirus record is adapted to include a working status (210) and a test status (220) and checking for a correction for the retrieved antivirus record, wherein said correction includes a change in the status of the antivirus record. When a correction for the antivirus record is found, said correction is used for the retrieved antivirus record for further operation of the antivirus application (310) with the object (200). When the processing of the software object (200) using a corrected record with working status (210) indicates that the software object (200) is malicious, the user is at least notified about detected malware; and when the processing of the software object (200) using a corrected record with test status (220) indicates that the software object (200) is malicious, the user is at least not notified about detected malware.

    摘要翻译： 本发明公开了用于修正反病毒记录的系统和方法。 在一种示例方法中，恶意软件从与分析的对象，其识别对象作为恶意或清洁相关联的防病毒记录的反病毒数据库中检索反病毒应用程序的软件对象的分析过程中。 因此，应用程序会检查是否有该病毒记录的修正在杀毒缓存并使用校正软件对象的分析。 如果在缓存中没有找到修正，应用程序会检查病毒记录的正确性与防病毒服务器。 防病毒服务器使用来自部署在不同的计算机上验证的杀毒记录正确性防病毒应用程序收集的软件对象的统计信息。 如果防病毒服务器提供对防病毒记录的修正，该应用程序为恶意软件的软件对象的分析所提供的修正。

    System and method for correcting antivirus records to minimize false malware detections
    3.
    发明公开
    System and method for correcting antivirus records to minimize false malware detections 有权
    系统和方法修正杀毒条目减少恶意软件的错误检测

    公开(公告)号：EP2790122A2

    公开(公告)日：2014-10-15

    申请号：EP14176048.8

    申请日：2012-04-20

    申请人： Kaspersky Lab, ZAO

    发明人： Romanenko, Alexander A. ,  Lapushkin, Anton S. ,  Ishanov, Oleg A.

    IPC分类号： G06F21/56 ,  H04L29/06

    CPC分类号： H04L63/145 ,  G06F21/56 ,  G06F21/561 ,  G06F21/568

    摘要： Disclosed is a computer-implemented method for malware detection. The method comprises analyzing by an antivirus application (310) a software object (200) for presence of malware; retrieving from an antivirus database (160) of the antivirus application (310) an antivirus record associated with the analyzed object (200), wherein the antivirus record identifies the object (200) as malicious and wherein the antivirus record is adapted to include a working status (210) and a test status (220) and checking for a correction for the retrieved antivirus record, wherein said correction includes a change in the status of the antivirus record. When a correction for the antivirus record is found, said correction is used for the retrieved antivirus record for further operation of the antivirus application (310) with the object (200). When the processing of the software object (200) using a corrected record with working status (210) indicates that the software object (200) is malicious, the user is at least notified about detected malware; and when the processing of the software object (200) using a corrected record with test status (220) indicates that the software object (200) is malicious, the user is at least not notified about detected malware.

    摘要翻译： 公开了一种用于检测恶意软件的计算机实现的方法。 所述方法包括在反病毒应用程序（310）的软件对象（200）的恶意软件的存在分析由; 从在反病毒应用程序（310）到与所分析的对象（200）worin杀毒记录相关联的记录的防病毒的病毒数据库（160）检索识别对象（200）为恶意和worin杀毒记录适于包括一个工作 状态（210）和测试状态（220），并检查所检索的防病毒记录的校正，worin所述校正包括在杀毒记录的状态的变化。 当反病毒记录的校正被发现，所述校正被用于为反病毒应用程序（310）与对象（200）的另外的外科手术所检索的杀毒记录。 当使用带工作状态（210）校正后的记录中的软件对象（200）的处理指示所做的软件对象（200）是恶意的，用户被至少通知关于检测到恶意软件; 并且当使用具有测试状态（220）校正后的记录中的软件对象（200）的处理指示所做的软件对象（200）是恶意的，用户是至少不被通知有关检测到的恶意软件。

    System and method for correcting antivirus records to minimize false malware detection
    4.
    发明公开
    System and method for correcting antivirus records to minimize false malware detection 审中-公开
    系统和方法修正杀毒记录减少恶意软件的错误检测

    公开(公告)号：EP2597586A1

    公开(公告)日：2013-05-29

    申请号：EP12164873.7

    申请日：2012-04-20

    申请人： Kaspersky Lab, ZAO

    发明人： Romanenko, Alexander A. ,  Lapushkin, Anton S. ,  Ishanov, Oleg A.

    IPC分类号： G06F21/00 ,  H04L29/06

    CPC分类号： H04L63/145 ,  G06F21/56 ,  G06F21/561 ,  G06F21/568

    摘要： Disclosed are system and method for correcting antivirus records. In an example method, during analysis of a software object for malware, an antivirus application retrieves from an antivirus database an antivirus record associated with the analyzed object, which identifies the object as malicious or clean. The application also checks if there is a correction for the antivirus record in an antivirus cache and use the correction for analysis of the software object. If no correction is found in the cache, the application checks correctness of the antivirus record with an antivirus server. The antivirus server uses statistical information about software objects collected from antivirus applications deployed on different computers to validate correctness of antivirus records. If the antivirus server provides a correction for the antivirus record, the application uses the provided correction for analysis of the software object for malware.

    摘要翻译： 本发明公开了用于修正反病毒记录的系统和方法。 在一种示例方法中，恶意软件从与分析的对象，其识别对象作为恶意或清洁相关联的防病毒记录的反病毒数据库中检索反病毒应用程序的软件对象的分析过程中。 因此，应用程序会检查是否有该病毒记录的修正在杀毒缓存并使用校正软件对象的分析。 如果在缓存中没有找到修正，应用程序会检查病毒记录的正确性与防病毒服务器。 防病毒服务器使用来自部署在不同的计算机上验证的杀毒记录正确性防病毒应用程序收集的软件对象的统计信息。 如果防病毒服务器提供对防病毒记录的修正，该应用程序为恶意软件的软件对象的分析所提供的修正。