A Fast Index-based Intelligent Threat Disposal Model Search
Yuyang Sun, Heng Xu, Chun He, Xueyu Yuan · 2022 IEEE 5th International Conference on Automation, Electronics and Electrical Engineering (AUTEEE) · 2022
In recent years, with the increasing popularity of the Internet, Trojan horses, viruses and other zombie programs and other backdoor programs are also increasingly concerned about the problem. In the face of constantly updated iterations of new viruses, relying on real-time updates of antivirus software alone for disposal is inefficient. Therefore, there is a need to provide a threat disposal solution to improve the efficiency of disposal of network threat events and to guarantee the removal of threats in computers in the shortest possible time to minimize losses. In this paper, we establish a more intelligent threat disposal tool model, by the user manually or according to the file directly add threats, based on the existence of the sample of key information, including process PID or name, registry entries or values, service name or service file path and file name, etc., using “Everything” for fast Index search for local files, for the system to intelligently associate and remove threats, to improve the speed and effectiveness of the scan for the disposal of network threat events. At the same time, you can also directly carry out a rapid search traversal of the whole disk, through the Supevised learning for intelligent weighted calculation of the score to determine whether the threat file, to achieve intelligent removal, to improve the speed and accuracy of scanning.