| 摘要 |
<p>Provided are a method and a server for discriminating a malicious attribute of a program. The method comprises: acquiring behavior data of a program at a client (101); acquiring a malicious behavior and a malicious behavior value of the program according to the behave data of the program and sample data stored locally (102), the sample data comprising a malicious program sample set and a non-malicious program sample set, and the malicious behavior value reflecting a malicious degree of the malicious behavior; determining a malicious attribute of the program according to the malicious behavior and/or the malicious behavior value of the program (103). The provided method and server can determine a malicious attribute of a report file that does not have the same sample at the background.</p> |
