| 摘要 |
A blocking-scanning manager ( 101 ) detects ( 200 ) attempted malicious behavior of running code ( 120 ). In response to detection, the blocking-scanning manager ( 101 ) blocks ( 206 ) the attempted malicious behavior. The blocking-scanning manager ( 101 ) generates ( 208 ) a signature to identify the code that attempted the malicious behavior. The blocking-scanning manager ( 101 ) detects ( 506 ) code identified by the signature. Responsive to detection, the blocking-scanning manager ( 101 ) blocks ( 508 ) execution of the identified code ( 122 ).
|
