Virulence and hazard analysis system for computer viruses

Virulence and hazard analysis system for computer viruses

  • CN 102,034,044 B
  • Filed: 12/14/2010
  • Issued: 03/18/2015
  • Est. Priority Date: 12/14/2010
  • Status: Active Grant
First Claim
Patent Images

1. the toxicity of computer virus and a HAZAN system, it is characterized in that, this system comprises user management subsystem (1), fuzzy evaluation subsystem (2) and result maintenance subsystem (3);

  • User management subsystem (1) is responsible for that user logs in, registration and the management of user profile;

    User management subsystem (1), after user'"'"'s Successful login, is transmitted the user name of current login user and enters result maintenance subsystem (3);

    Fuzzy evaluation subsystem (2) is the core of whole system, be responsible for the computer virus that test and appraisal active user newly submits to, support that user inputs the title of current test and appraisal computer virus, the weight of one-level and each hazard factor of secondary is arranged, the consistency check that the amended weight of system of users is arranged, allow to arrange recovery system default settings to amended weight, the score value input of each hazard factor in the second level, Fuzzy Calculation is carried out to current test and appraisal computer virus data and provides the evaluation score of computer virus harmfulness and opinion rating and preserve these evaluation and test data, fuzzy evaluation subsystem (2) is by the data record of the computer virus of current New Appraisement, comprise the title of this computer virus, weighted value after one-level and each hazard factor normalization of secondary, the score value of each hazard factor in the second level, and the evaluation and test data that Fuzzy Calculation obtains, pass to result maintenance subsystem (3) and show,Result maintenance subsystem (3) primary responsibility manages the data of the individual virus base of current login user, to comprise in the individual virus base to current login user the evaluation information of all computer viruses and the display of weight information and browse, and to the inquiry of the evaluation and test data of the concrete computer virus in current individual virus base and deletion;

    By refreshing the individual virus base of active user when result maintenance subsystem (3) receives the data to the computer virus of New Appraisement in fuzzy evaluation subsystem (2), in time successful for this New Appraisement computer virus is shown to user;

    Result maintenance subsystem (3) can transmit the user name of current login user and user identity and enter fuzzy evaluation subsystem (2);

    Fuzzy evaluation subsystem (2) comprises retrieval and adds module (2.1), weight setting module (2.2), index load module (2.3) and Fuzzy Calculation module (2.4);

    Retrieval is added module (2.1) and is responsible for retrieving at the individual virus base of active user according to the computer virus title of user'"'"'s input;

    If retrieve Virus Info, then point out user to there is this computer virus record, this adds end, returns display module (3.1);

    If do not retrieved, then whether the computer virus title inputted when user name and user identity, the user search of module (2.1) transmission active user is added in retrieval and user skip weight arranges the selection result of function to weight setting module (2.2);

    Weight setting module (2.2) is professional user'"'"'s service, user is progressively guided to carry out weight setting to each hazard factor of the computer virus first order and the second level that system provides, then transmit by the weight vectors of each hazard factor or the weight vectors of system default of consistency check, and the computer virus title received and user name are to index load module (2.3);

    Weight setting module (2.2) is a default set of weight vectors for domestic consumer remains;

    Weight setting module (2.2) comprises ratio and arranges module (2.2.1), sequence checking module (2.2.2), consistency check module (2.2.3), reminding module (2.2.4), repairs module (2.2.5);

    Ratio arranges module (2.2.1) and is responsible for guiding user progressively to carry out ratio set to each hazard factor of firsts and seconds that system provides, system according to the input value structure pairwise comparison matrix of user, and transmits this pairwise comparison matrix, the title of computer virus of current test and appraisal and user name to sequence checking module (2.2.2);

    Sequence checking module (2.2.2) is responsible for inspection and is arranged whether all pairwise comparison matrix that module (2.2.1) forms are positive and negative mutual exclusion battle arrays by ratio, to judge whether the value of user'"'"'s each hazard factor of input in ratio arranges module (2.2.1) is passed through, if sequence checking is not passed through, then return ratio and module (2.2.1) is set, require that user re-enters, if sequence checking is passed through, transmit by the pairwise comparison matrix of sequence checking, the title of the computer virus of current test and appraisal and user name also enter consistency check module (2.2.3),Consistency check module (2.2.3) is responsible for carrying out consistency check to the pairwise comparison matrix that sequence checking module (2.2.2) has been upchecked, if consistency check is not passed through, then to transmit in user name, the computer virus title of current test and appraisal and consistency check result in-problem input value to reminding module (2.2.4), the name delivery of the computer virus of this pairwise comparison matrix and current test and appraisal is given simultaneously and repair module (2.2.5);

    If consistency check is passed through, then the name delivery of user name, the weight vectors of computer virus hazard factor at different levels calculated and the computer virus of current test and appraisal to index load module (2.3);

    Reminding module (2.2.4) knows that the consistency check that consistency check module (2.2.3) is carried out is obstructed out-of-date, the matrix that pairwise comparison matrix and system oneself not by consistency check determines is compared, find out the hazard factor weight input value that gap is large, and again show corresponding hazard factor weight input page, prompting user needs to re-enter, and reminding module (2.2.4) transmits the title of the computer virus of user name and current test and appraisal to repairing module (2.2.5);

    Repair the responsible hazard factor weight input value upgrading user and reset under the prompting of reminding module (2.2.4) of module (2.2.5), re-construct pairwise comparison matrix, then transmit user name, the title of computer virus of current test and appraisal and this new pairwise comparison matrix to sequence checking module (2.2.2);

    Index load module (2.3) is responsible for each hazard factor assignment of the computer virus of current New Appraisement, the i.e. order that shows according to system of user, be followed successively by the secondary hazard factor input score value of each one-level hazard factor subordinate, the score value of the second level hazard factor then user inputted, and from weight setting module (2.2) receive by the weight vectors of each hazard factor or the weight vectors of system default of consistency check, the computer virus title of user name and current New Appraisement all passes to Fuzzy Calculation module (2.4);

    The score value of each hazard factor of computer virus that the weight vectors of each hazard factor of computer virus that Fuzzy Calculation module (2.4) calculates based on weight setting module (2.2) or the weight vectors of system default and index load module (2.3) transmit, be responsible for carrying out Fuzzy Calculation, and evaluate toxicity and the harmfulness of computer virus;

    Last Fuzzy Calculation module (2.4), by the title of this computer virus, weight information at different levels, the score value of second level hazard factor, evaluation score, opinion rating, passes to and returns display module (3.1);

    The method of Fuzzy Calculation module (2.4) Fuzzy Calculation is;

    W and R that the score value of each hazard factor of computer virus that the weight vectors of computer virus hazard factor at different levels weight setting module (2.2) calculated or the weight vectors of system default and index load module (2.3) are formed is updated to formula I respectively carries out calculating and providing evaluation result S;

    formula I Wherein " o " is multiplication of matrices and fuzzy operator, and fuzzy operator is defined as w=[μ

    1, μ

    2..., μ

    m], and for weight coefficient matrix, namely at the weight vectors that consistency check module (2.2.3) calculates, each μ

    irepresent the proportion of above-mentioned i-th hazard factor;

    R is Evaluations matrix, each r ijrepresent hazard factor u ito comment rank v jdegree of membership r ij, r ijinquire about the second level hazard factor preset to obtain the degree of membership table belonging to each comment rank, and then inquiry obtains the actual value of the degree of membership of the corresponding hazard level of second level hazard factor;

    System is normalized last evaluation result S, and then adopt the maximum membership grade principle of one of fuzzy evaluation principle to pass judgment on, the grade namely selecting a degree of membership maximum in S corresponding is final opinion rating.

View all claims
    ×
    ×

    Thank you for your feedback

    ×
    ×