METHOD, DEVICE AND SYSTEM FOR ALERTING AGAINST UNKNOWN MALICIOUS CODES

摘要

A method, a device, and a system for alerting against unknown malicious codes are disclosed. The method includes: detecting characteristics of a packet; judging whether any suspicious code exists in the packet according to a result of the detection; recording a source path of the suspicious code if the suspicious code exists in the packet; and sending alert information that carries the source path to a monitoring device. The embodiments of the present disclosure can report source path of numerous suspicious codes proactively at the earliest possible time, lay a foundation for shortening the time required for overcoming virus threats, and avoid the trouble of installing software on the terminal.

主权项

1. A method for alerting against unknown malicious codes, comprising:
receiving, by a network device, a request sent by a terminal for obtaining a file from a network entity and a data stream carrying the file; recording, by the network device, a source path carried in the request, wherein the network entity providing the file on the source path; judging, by the network device, whether the file is an executable file according to the request or the data stream carried the file; and sending, by the network device, first alert information that carries the source path to a monitoring device, if the network device judges the file is the executable file.