首页> 外国专利> Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses

Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses

机译:基于哈希的系统和方法,用于检测和阻止多态网络蠕虫和病毒的传播

摘要

A system (200) detects transmission of potentially malicious packets. The system (200) receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system (200) then compares the generated hash values to hash values associated with prior packets. The system (200) determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.
机译:系统( 200 )检测到潜在恶意数据包的传输。系统( 200 )接收或观察包,并根据包的可变大小块生成哈希值。然后,系统( 200 )将生成的哈希值与与先前数据包关联的哈希值进行比较。当与接收的数据包关联的一个或多个生成的哈希值与与先前的数据包关联的一个或多个哈希值匹配时,系统( 200 )确定接收到的数据包之一是潜在的恶意数据包包。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号