CN103823871A - Method and device for searching for software - Google Patents

Method and device for searching for software Download PDF

Info

Publication number
CN103823871A
CN103823871A CN201410067410.8A CN201410067410A CN103823871A CN 103823871 A CN103823871 A CN 103823871A CN 201410067410 A CN201410067410 A CN 201410067410A CN 103823871 A CN103823871 A CN 103823871A
Authority
CN
China
Prior art keywords
software
search
sample
type
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201410067410.8A
Other languages
Chinese (zh)
Inventor
徐鸣
胡月鹏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Conew Network Technology Beijing Co Ltd
Original Assignee
Conew Network Technology Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Conew Network Technology Beijing Co Ltd filed Critical Conew Network Technology Beijing Co Ltd
Priority to CN201410067410.8A priority Critical patent/CN103823871A/en
Publication of CN103823871A publication Critical patent/CN103823871A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/903Querying
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/56Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/562Static detection

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Databases & Information Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Health & Medical Sciences (AREA)
  • Computational Linguistics (AREA)
  • Data Mining & Analysis (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

The invention provides a method and device for searching for software. In order to lower local storage burdens, timely find out new software and lower network flow and spending, the method for searching for software includes the steps that information of the software to be searched for is acquired; in accordance with the information of the software to be searched for and a preset local sample library, whether the software to be searched for exists in the local sample library or not is judged; when the software to be searched for does not exist in the local sample library, the information of the software to be searched for is sent to a cloud end, so that the type of the software to be searched for is determined by the cloud end according to the information of the software to be searched for. By the adoption of the method, the local storage burdens can be lowered, new software can be timely found out, and network flow and spending can be lowered.

Description

Software lookup method and device
Technical field
The present invention relates to communication technical field, relate in particular to a kind of software lookup method and device.
Background technology
In order to protect user data, improve user's experience etc., under some scenes, need software to search.For example, while adopting antivirus software to kill virus, or, while adopting garbage-cleaning software to carry out software cleaning, all need to search local software, to compare with the database in antivirus software or garbage-cleaning software.
In correlation technique, a kind of mode is that search this locality, this kind of mode is at local stored data base, searches, still in local data base, because database is conventionally very large, can increase local storage burden, and, due to the continuous appearance of new software, if can not upgrade in time, database can cause and search error, and user is caused to certain loss.Another kind of mode is that search in high in the clouds, now mode is that client is connected to high in the clouds, the database in target software and high in the clouds is compared, which can reduce local storage burden, also can find in time new software, but this mode needs client to be connected with network always, can produce a large amount of flows and increase network overhead.
Summary of the invention
The present invention is intended to solve at least to a certain extent one of technical matters in correlation technique.
For this reason, one object of the present invention is to propose a kind of software lookup method, and the method can reduce local storage burden, can find in time new software, and can reduce network traffics and expense.
Another object of the present invention is to propose a kind of software and searches device.
For achieving the above object, the software lookup method that first aspect present invention embodiment proposes, comprising: the information of obtaining the software that will search; According to the information of the described software that will search, and predefined local Sample Storehouse, judge in described local Sample Storehouse, whether there is the described software that will search; There is not the described software that will search in described local Sample Storehouse time, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
The software lookup method that first aspect present invention embodiment proposes, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.
For achieving the above object, the software that second aspect present invention embodiment proposes is searched device, comprising: acquisition module, for obtaining the information of the software that will search; Judge module, for according to the information of the described software that will search, and predefined local Sample Storehouse, judge in described local Sample Storehouse, whether there is the described software that will search; Sending module, be used in the time that described judge module show that described local Sample Storehouse does not exist the described software that will search, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
The software that second aspect present invention embodiment proposes is searched device, by first searching in this locality, goes to high in the clouds to search in this locality while existence again, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.
For achieving the above object, the client device that third aspect present invention embodiment proposes, comprise housing, processor, storer, circuit board and power circuit, wherein, described circuit board is placed in the interior volume that described housing surrounds, and described processor and described storer are arranged on described circuit board; Described power circuit, is used to each circuit or the device power supply of described client device; Described storer is for stores executable programs code; Described processor moves the program corresponding with described executable program code by reading the executable program code of storing in described storer, for: the information of obtaining the software that will search; According to the information of the described software that will search, and predefined local Sample Storehouse, judge in described local Sample Storehouse, whether there is the described software that will search; There is not the described software that will search in described local Sample Storehouse time, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
The client device that third aspect present invention embodiment proposes, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.
The aspect that the present invention is additional and advantage in the following description part provide, and part will become obviously from the following description, or recognize by practice of the present invention.
Accompanying drawing explanation
The present invention above-mentioned and/or additional aspect and advantage will become from the following description of the accompanying drawings of embodiments obviously and easily and understand, wherein:
Fig. 1 is the schematic flow sheet of the software lookup method of one embodiment of the invention proposition;
Fig. 2 is the schematic flow sheet that another embodiment of the present invention proposes software lookup method;
Fig. 3 is the structural representation that the software of another embodiment of the present invention proposition is searched device;
Fig. 4 is the structural representation that the software of another embodiment of the present invention proposition is searched device;
Fig. 5 is the structural representation that the software of another embodiment of the present invention proposition is searched device.
Embodiment
Describe embodiments of the invention below in detail, the example of described embodiment is shown in the drawings, and wherein same or similar label represents same or similar element or has the element of identical or similar functions from start to finish.Be exemplary below by the embodiment being described with reference to the drawings, only for explaining the present invention, and can not be interpreted as limitation of the present invention.On the contrary, embodiments of the invention comprise all changes, modification and the equivalent within the scope of spirit and the intension that falls into additional claims.
Fig. 1 is the schematic flow sheet of the software lookup method of one embodiment of the invention proposition, comprising:
S11: client device obtains the information of the software that will search.
Wherein, client device can be mobile phone, panel computer, desktop computer, notebook computer etc.
Client device can obtain by means such as scannings the information of the software that will search.
Take android version poison despot as example, in the time that user needs Scan for Viruses, antivirus software can find according to the List<ResolveInfo>resolveInfos=pm.queryIntentActivities in PackageManager pm=this.getPackageManager () interface (mainIntent, PackageM anager.MATCH_DEFAULT_ONLY) information of each application.
S12: client device is according to the information of the described software that will search, and predefined local Sample Storehouse, judges in described local Sample Storehouse, whether there is the described software that will search.
Wherein, can record the information of at least one software in local Sample Storehouse, the software information recording in the information of the software that will search by comparison and local Sample Storehouse, can determine the software that whether exists this to search in local Sample Storehouse.
S13: when client device does not exist the described software that will search in described local Sample Storehouse, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
Wherein, high in the clouds is a large database, can record the type that up-to-date software is corresponding, therefore, can find beyond the clouds the type of the software that this locality do not have.
The type can refer to that this software is normal software or has problem software.For example, in the time of virus scan, can determine the software that will search is virus or normal software; Or, in the time of garbage-cleaning, can determine the software that will search and be software or the normal software of wanting cleaned or not.
The present embodiment, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.
Fig. 2 is the schematic flow sheet that another embodiment of the present invention proposes software lookup method, comprising:
S21: client device obtains the information of the software that will search.
Specifically can, referring to S11, repeat no more.
S22: client device is according to the information of the described software that will search, and predefined local Sample Storehouse, judges and in described local Sample Storehouse, whether has the described software that will search, if so, carry out S24, otherwise, carry out S23.
Wherein, can logging software information in local Sample Storehouse and the corresponding relation of type, wherein, type can be divided into the first kind and Second Type, that is to say, and local Sample Storehouse is made up of the sample of the first kind and the sample of Second Type.The sample of the first kind is in-problem sample, the software that for example virus maybe will be cleared up etc., and the sample of Second Type is normal sample.
In the time that the software that will search is the sample of the 3rd type, just can show not exist the described software that will search in described local Sample Storehouse, the sample of the 3rd type refers to and is not the sample of the first kind and is not the sample of Second Type, just the information of the sample of the 3rd type also can be issued to high in the clouds afterwards.
Wherein, rightly more clearly state, the sample of above-mentioned three types can be interpreted as to black sample, white sample and grey sample.
Further, in order to reduce local memory capacity, can when initial, set less Sample Storehouse, namely, when initial, the number of the number of the sample of the described first kind and/or the sample of described Second Type is less than the number of setting.
Further, can only in local Sample Storehouse, carry out type division, but not comprise concrete sample, that is, will the sample of the first kind and the sample of Second Type be set, but the sample of the sample of the first kind and/or Second Type is empty.That is to say, when initial, the number of the sample of the described first kind is 0, and/or the number of the sample of described Second Type is 0.
S23: client device, according to the software information recording in described local Sample Storehouse and corresponding type, is determined the described type that will search software.Finish afterwards.
In the time there is the software that will search in local Sample Storehouse, that is to say when the software that will search is the software of the first kind or the software of Second Type, client device just can be determined according to the concrete corresponding type of this software that will search of record, for example, in local Sample Storehouse, record the sample that this software that will search belongs to the first kind, the first kind so just can determine the type of this software that will search time.
In correlation technique, in local data base, only there is black sample, in the time that the software that will search is not the black sample recording in local data base, be just defined as white sample.But probably local data base does not upgrade, this software that will search is new black sample, will cause like this misjudgment, and user is caused damage.And the present embodiment not only arranges black sample white sample and grey sample is also set, can find in this locality time, can facilitate and accurately determine type, in the time not existing, again search rather than be directly defined as whitely, improve accuracy, avoid user to lose.
S24: client device sends the information of this software that will search to high in the clouds.
S25: search according to the information of the software that this will be searched in high in the clouds, determines the type of this software that will search.
Because high in the clouds can exist up-to-date software information, therefore, can find beyond the clouds the type of local ignorant software, for example, it is virus or normal software that the software that will search can be found in high in the clouds, or the software that will search is to want cleaned software or not cleaned normal software.
S26: high in the clouds sends the type of this software that will search to client device.
For example, to send this software that will search to client device be virus or normal software etc. in high in the clouds.
S27: client device is by the type of the information of the described software that will search and the described software that will search, and corresponding record is in described local Sample Storehouse.
For example, in the time that the software that will search is the first kind, the information recording of the software that will search is in the sample of the first kind.
The present embodiment, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.Further, the present embodiment is distinguished the first kind and Second Type in local Sample Storehouse, in the time not being the first kind and Second Type, again search to high in the clouds, convenient accurately definite type can find in this locality time, can not search in this locality time, again search and determine rather than be directly defined as white sample, can improve judgment accuracy, avoid user to lose.Further, the result obtaining is searched in high in the clouds can be kept at this locality, just does not need to search to high in the clouds more like this in the time searching next time, can determine in this locality, improves search efficiency.
Fig. 3 is the structural representation that the software of another embodiment of the present invention proposition is searched device, and this device 30 comprises acquisition module 31, judge module 32 and sending module 33.
Acquisition module 31 is for obtaining the information of the software that will search; Judge module 32 is for according to the information of the described software that will search, and predefined local Sample Storehouse, judges in described local Sample Storehouse, whether there is the described software that will search; Sending module 33 is when showing that at described judge module 32 described local Sample Storehouse does not exist the described software that will search, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
Wherein, this device can be arranged in client device, and client device can be mobile phone, panel computer, desktop computer, notebook computer etc.
Acquisition module 31 can obtain by means such as scannings the information of the software that will search.
Take android version poison despot as example, in the time that user needs Scan for Viruses, antivirus software can find according to the List<ResolveInfo>resolveInfos=pm.queryIntentActivities in PackageManager pm=this.getPackageManager () interface (mainIntent, PackageM anager.MATCH_DEFAULT_ONLY) information of each application.
Wherein, can record the information of at least one software in local Sample Storehouse, the software information recording in the information of the software that judge module 32 will be searched by comparison and local Sample Storehouse, can determine the software that whether exists this to search in local Sample Storehouse.
Further, can logging software information in local Sample Storehouse and the corresponding relation of type, wherein, type can be divided into the first kind and Second Type, that is to say, and local Sample Storehouse is made up of the sample of the first kind and the sample of Second Type.The sample of the first kind is in-problem sample, the software that for example virus maybe will be cleared up etc., and the sample of Second Type is normal sample.
In the time that the software that will search is the sample of the 3rd type, judge module 32 just can be determined and in described local Sample Storehouse, not have the described software that will search, the sample of the 3rd type refers to and is not the sample of the first kind and is not the sample of Second Type, and just also the information exchange of the sample of the 3rd type is crossed sending module 33 and be issued high in the clouds afterwards.
Wherein, rightly more clearly state, the sample of above-mentioned three types can be interpreted as to black sample, white sample and grey sample.
In correlation technique, in local data base, only there is black sample, in the time that the software that will search is not the black sample recording in local data base, be just defined as white sample.But probably local data base does not upgrade, this software that will search is new black sample, will cause like this misjudgment, and user is caused damage.And the present embodiment not only arranges black sample white sample and grey sample is also set, can find in this locality time, can facilitate and accurately determine type, in the time not existing, again search rather than be directly defined as whitely, improve accuracy, avoid user to lose.
Further, in order to reduce local memory capacity, can when initial, set less Sample Storehouse, namely, when initial, the number of the number of the sample of the described first kind and/or the sample of described Second Type is less than the number of setting.
Further, can only in local Sample Storehouse, carry out type division, but not comprise concrete sample, that is, will the sample of the first kind and the sample of Second Type be set, but the sample of the sample of the first kind and/or Second Type is empty.That is to say, when initial, the number of the sample of the described first kind is 0, and/or the number of the sample of described Second Type is 0.
Wherein, high in the clouds is a large database, can record the type that up-to-date software is corresponding, therefore, can find beyond the clouds the type of the software that this locality do not have.
The type can refer to that this software is normal software or has problem software.For example, in the time of virus scan, can determine the software that will search is virus or normal software; Or, in the time of garbage-cleaning, can determine the software that will search and be software or the normal software of wanting cleaned or not.
The present embodiment, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.
Fig. 4 is the structural representation that the software of another embodiment of the present invention proposition is searched device, and this device 40 comprises acquisition module 41, judge module 42 and determination module 43.
Acquisition module 41 is for obtaining the information of the software that will search; Judge module 42 is for according to the information of the described software that will search, and predefined local Sample Storehouse, judges in described local Sample Storehouse, whether there is the described software that will search; While there is the described software that will search for obtain described local Sample Storehouse at described judge module 42 in determination module 43, according to the software information recording in described local Sample Storehouse and corresponding type, the type that will search software described in determining.
Wherein, this device can be arranged in client device, and client device can be mobile phone, panel computer, desktop computer, notebook computer etc.
Acquisition module 41 can obtain by means such as scannings the information of the software that will search.
Take android version poison despot as example, in the time that user needs Scan for Viruses, antivirus software can find according to the List<ResolveInfo>resolveInfos=pm.queryIntentActivities in PackageManager pm=this.getPackageManager () interface (mainIntent, PackageM anager.MATCH_DEFAULT_ONLY) information of each application.
Wherein, can logging software information in local Sample Storehouse and the corresponding relation of type, wherein, type can be divided into the first kind and Second Type, that is to say, and local Sample Storehouse is made up of the sample of the first kind and the sample of Second Type.The sample of the first kind is in-problem sample, the software that for example virus maybe will be cleared up etc., and the sample of Second Type is normal sample.
In the time that the software that will search is the sample of the first kind or the sample of Second Type, judge module 42 just can be determined the software that will search described in existence in described local Sample Storehouse.
In the time there is the software that will search in local Sample Storehouse, that is to say when the software that will search is the software of the first kind or the software of Second Type, determination module 43 just can be determined according to the concrete corresponding type of this software that will search of record, for example, in local Sample Storehouse, record the sample that this software that will search belongs to the first kind, the first kind so just can determine the type of this software that will search time.
Further, in order to reduce local memory capacity, can when initial, set less Sample Storehouse, namely, when initial, the number of the number of the sample of the described first kind and/or the sample of described Second Type is less than the number of setting.
Further, can only in local Sample Storehouse, carry out type division, but not comprise concrete sample, that is, will the sample of the first kind and the sample of Second Type be set, but the sample of the sample of the first kind and/or Second Type is empty.That is to say, when initial, the number of the sample of the described first kind is 0, and/or the number of the sample of described Second Type is 0.
The present embodiment passes through at the sample of the local record first kind and the sample of Second Type, can be dissimilar according to this, directly accurately determine the type of the software that will search.With respect to only recording black sample in correlation technique to not being the scheme that black sample is just defined as white sample, can improve accuracy, avoid user to lose.
Fig. 5 is the structural representation that the software of another embodiment of the present invention proposition is searched device, and this device 50 comprises acquisition module 51, judge module 52, sending module 53, receiver module 54 and logging modle 55.
The concrete function of acquisition module 51, judge module 52 and sending module 53 can embodiment shown in Figure 3, does not repeat them here.
Receiver module 54 is for the type of the described software that will search that receives described high in the clouds and send; Logging modle 55 is for by the type of the information of the described software that will search and the described software that will search, and corresponding record is in described local Sample Storehouse.
For example, receiver module 54 receives the information that this software that will search of high in the clouds transmission is virus or normal software.
For example, in the time that the software that will search is the first kind, the information recording of the software that logging modle 55 will be searched is in the sample of the first kind.
The present embodiment, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.Further, the present embodiment is distinguished the first kind and Second Type in local Sample Storehouse, in the time not being the first kind and Second Type, again search to high in the clouds, convenient accurately definite type can find in this locality time, can not search in this locality time, again search and determine rather than be directly defined as white sample, can improve judgment accuracy, avoid user to lose.Further, the result obtaining is searched in high in the clouds can be kept at this locality, just does not need to search to high in the clouds more like this in the time searching next time, can determine in this locality, improves search efficiency.
The embodiment of the present invention also provides a kind of client device, and this client device comprises housing, processor, storer, circuit board and power circuit, and wherein, circuit board is placed in the interior volume that housing surrounds, and processor and storer are arranged on circuit board; Power circuit, is used to each circuit or the device power supply of client device; Storer is for stores executable programs code; Processor moves the program corresponding with executable program code by the executable program code of storing in read memory, for carrying out following steps:
S11 ': the information of obtaining the software that will search.
Wherein, client device can be mobile phone, panel computer, desktop computer, notebook computer etc.
Client device can obtain by means such as scannings the information of the software that will search.
Take android version poison despot as example, in the time that user needs Scan for Viruses, antivirus software can find according to the List<ResolveInfo>resolveInfos=pm.queryIntentActivities in PackageManager pm=this.getPackageManager () interface (mainIntent, PackageM anager.MATCH_DEFAULT_ONLY) information of each application.
S12 ': according to the information of the described software that will search, and predefined local Sample Storehouse, judge in described local Sample Storehouse, whether there is the described software that will search.
Wherein, can record the information of at least one software in local Sample Storehouse, the software information recording in the information of the software that will search by comparison and local Sample Storehouse, can determine the software that whether exists this to search in local Sample Storehouse.
S13 ': there is not the described software that will search in described local Sample Storehouse time, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
Wherein, high in the clouds is a large database, can record the type that up-to-date software is corresponding, therefore, can find beyond the clouds the type of the software that this locality do not have.
The type can refer to that this software is normal software or has problem software.For example, in the time of virus scan, can determine the software that will search is virus or normal software; Or, in the time of garbage-cleaning, can determine the software that will search and be software or the normal software of wanting cleaned or not.
The present embodiment, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.
In another embodiment, processor is used for carrying out following steps:
S21 ': client device obtains the information of the software that will search.
Specifically can, referring to S11 ', repeat no more.
S22 ': client device is according to the information of the described software that will search, and predefined local Sample Storehouse, judges and in described local Sample Storehouse, whether has the described software that will search, if so, carry out S24 ', otherwise, carry out S23 '.
Wherein, can logging software information in local Sample Storehouse and the corresponding relation of type, wherein, type can be divided into the first kind and Second Type, that is to say, and local Sample Storehouse is made up of the sample of the first kind and the sample of Second Type.The sample of the first kind is in-problem sample, the software that for example virus maybe will be cleared up etc., and the sample of Second Type is normal sample.
In the time that the software that will search is the sample of the 3rd type, just can show not exist the described software that will search in described local Sample Storehouse, the sample of the 3rd type refers to and is not the sample of the first kind and is not the sample of Second Type, just the information of the sample of the 3rd type also can be issued to high in the clouds afterwards.
Wherein, rightly more clearly state, the sample of above-mentioned three types can be interpreted as to black sample, white sample and grey sample.
Further, in order to reduce local memory capacity, can when initial, set less Sample Storehouse, namely, when initial, the number of the number of the sample of the described first kind and/or the sample of described Second Type is less than the number of setting.
Further, can only in local Sample Storehouse, carry out type division, but not comprise concrete sample, that is, will the sample of the first kind and the sample of Second Type be set, but the sample of the sample of the first kind and/or Second Type is empty.That is to say, when initial, the number of the sample of the described first kind is 0, and/or the number of the sample of described Second Type is 0.
S23 ': client device, according to the software information recording in described local Sample Storehouse and corresponding type, is determined the described type that will search software.Finish afterwards.
In the time there is the software that will search in local Sample Storehouse, that is to say when the software that will search is the software of the first kind or the software of Second Type, client device just can be determined according to the concrete corresponding type of this software that will search of record, for example, in local Sample Storehouse, record the sample that this software that will search belongs to the first kind, the first kind so just can determine the type of this software that will search time.
In correlation technique, in local data base, only there is black sample, in the time that the software that will search is not the black sample recording in local data base, be just defined as white sample.But probably local data base does not upgrade, this software that will search is new black sample, will cause like this misjudgment, and user is caused damage.And the present embodiment not only arranges black sample white sample and grey sample is also set, can find in this locality time, can facilitate and accurately determine type, in the time not existing, again search rather than be directly defined as whitely, improve accuracy, avoid user to lose.
S24 ': client device sends the information of this software that will search to high in the clouds.
S25 ': search according to the information of the software that this will be searched in high in the clouds, determines the type of this software that will search.
Because high in the clouds can exist up-to-date software information, therefore, can find beyond the clouds the type of local ignorant software, for example, it is virus or normal software that the software that will search can be found in high in the clouds, or the software that will search is to want cleaned software or not cleaned normal software.
S26 ': high in the clouds sends the type of this software that will search to client device.
For example, to send this software that will search to client device be virus or normal software etc. in high in the clouds.
S27 ': client device is by the type of the information of the described software that will search and the described software that will search, and corresponding record is in described local Sample Storehouse.
For example, in the time that the software that will search is the first kind, the information recording of the software that will search is in the sample of the first kind.
The present embodiment, by first searching in this locality, goes to high in the clouds to search in this locality while more existence, can be in this locality pre-stored a small amount of Sample Storehouse, so just can reduce local storage and bear; In addition, while existence in this locality, go to again high in the clouds to search, can find in time new software; Moreover, because being just goes to high in the clouds to search while not existing in this locality rather than all go to high in the clouds to search at every turn, can reduce network traffics and expense.Further, the present embodiment is distinguished the first kind and Second Type in local Sample Storehouse, in the time not being the first kind and Second Type, again search to high in the clouds, convenient accurately definite type can find in this locality time, can not search in this locality time, again search and determine rather than be directly defined as white sample, can improve judgment accuracy, avoid user to lose.Further, the result obtaining is searched in high in the clouds can be kept at this locality, just does not need to search to high in the clouds more like this in the time searching next time, can determine in this locality, improves search efficiency.
It should be noted that, in description of the invention, term " first ", " second " etc. are only for describing object, and can not be interpreted as indication or hint relative importance.In addition,, in description of the invention, except as otherwise noted, the implication of " multiple " is two or more.
Any process of otherwise describing in process flow diagram or at this or method are described and can be understood to, represent to comprise that one or more is for realizing module, fragment or the part of code of executable instruction of step of specific logical function or process, and the scope of the preferred embodiment of the present invention comprises other realization, wherein can be not according to order shown or that discuss, comprise according to related function by the mode of basic while or by contrary order, carry out function, this should be understood by embodiments of the invention person of ordinary skill in the field.
Should be appreciated that each several part of the present invention can realize with hardware, software, firmware or their combination.In the above-described embodiment, multiple steps or method can realize with being stored in software or the firmware carried out in storer and by suitable instruction execution system.For example, if realized with hardware, the same in another embodiment, can realize by any one in following technology well known in the art or their combination: there is the discrete logic for data-signal being realized to the logic gates of logic function, there is the special IC of suitable combinational logic gate circuit, programmable gate array (PGA), field programmable gate array (FPGA) etc.
Those skilled in the art are appreciated that realizing all or part of step that above-described embodiment method carries is can carry out the hardware that instruction is relevant by program to complete, described program can be stored in a kind of computer-readable recording medium, this program, in the time carrying out, comprises step of embodiment of the method one or a combination set of.
In addition, the each functional unit in each embodiment of the present invention can be integrated in a processing module, can be also that the independent physics of unit exists, and also can be integrated in a module two or more unit.Above-mentioned integrated module both can adopt the form of hardware to realize, and also can adopt the form of software function module to realize.If described integrated module realizes and during as production marketing independently or use, also can be stored in a computer read/write memory medium using the form of software function module.
The above-mentioned storage medium of mentioning can be ROM (read-only memory), disk or CD etc.
In the description of this instructions, the description of reference term " embodiment ", " some embodiment ", " example ", " concrete example " or " some examples " etc. means to be contained at least one embodiment of the present invention or example in conjunction with specific features, structure, material or the feature of this embodiment or example description.In this manual, the schematic statement of above-mentioned term is not necessarily referred to identical embodiment or example.And specific features, structure, material or the feature of description can be with suitable mode combination in any one or more embodiment or example.
In description of the invention, it will be appreciated that, term " " center ", " longitudinally ", " laterally ", " length ", " width ", " thickness ", " on ", D score, " front ", " afterwards ", " left side ", " right side ", " vertically ", " level ", " top ", " end " " interior ", " outward ", " clockwise ", " counterclockwise ", " axially ", " radially ", orientation or the position relationship of indications such as " circumferentially " are based on orientation shown in the drawings or position relationship, only the present invention for convenience of description and simplified characterization, rather than device or the element of indication or hint indication must have specific orientation, with specific orientation structure and operation, therefore can not be interpreted as limitation of the present invention.
In the present invention, unless otherwise clearly defined and limited, the terms such as term " installation ", " being connected ", " connection ", " fixing " should be interpreted broadly, and for example, can be to be fixedly connected with, and can be also to removably connect, or integral; Can be mechanical connection, can be also electrical connection; Can be to be directly connected, also can indirectly be connected by intermediary, can be the connection of two element internals or the interaction relationship of two elements.For the ordinary skill in the art, can understand as the case may be above-mentioned term concrete meaning in the present invention.
In the present invention, unless otherwise clearly defined and limited, First Characteristic Second Characteristic " on " or D score can be that the first and second features directly contact, or the first and second features are by intermediary indirect contact.And, First Characteristic Second Characteristic " on ", " top " and " above " but First Characteristic directly over Second Characteristic or oblique upper, or only represent that First Characteristic level height is higher than Second Characteristic.First Characteristic Second Characteristic " under ", " below " and " below " can be First Characteristic under Second Characteristic or tiltedly, or only represent that First Characteristic level height is less than Second Characteristic.
Although illustrated and described embodiments of the invention above, be understandable that, above-described embodiment is exemplary, can not be interpreted as limitation of the present invention, and those of ordinary skill in the art can change above-described embodiment within the scope of the invention, modification, replacement and modification.

Claims (12)

1. a software lookup method, is characterized in that, comprising:
Obtain the information of the software that will search;
According to the information of the described software that will search, and predefined local Sample Storehouse, judge in described local Sample Storehouse, whether there is the described software that will search;
There is not the described software that will search in described local Sample Storehouse time, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
2. method according to claim 1, is characterized in that, after whether described judgement exists the described software that will search in described local Sample Storehouse, described method also comprises:
There is the described software that will search in described local Sample Storehouse time, according to the software information recording in described local Sample Storehouse and corresponding type, the type that will search software described in determining.
3. method according to claim 1, is characterized in that, also comprises:
Receive the type of the described software that will search of described high in the clouds transmission;
By the type of the information of the described software that will search and the described software that will search, corresponding record is in described local Sample Storehouse.
4. according to the method described in claims 1 to 3 any one, it is characterized in that, in described local Sample Storehouse, record the sample of the first kind and the sample of Second Type, so that in the time that the described software that will search belongs to the sample of the 3rd type, the information of the described software that will search is sent to high in the clouds, the sample of the described first kind is in-problem sample, the sample of described Second Type is normal sample, and the sample of described the 3rd type is the sample that does not belong to the sample of the described first kind and do not belong to described Second Type.
5. method according to claim 4, is characterized in that, when initial, the number of the number of the sample of the described first kind and/or the sample of described Second Type is less than the number of setting.
6. method according to claim 5, is characterized in that, when initial, the number of the sample of the described first kind is 0, and/or the number of the sample of described Second Type is 0.
7. software is searched a device, it is characterized in that, comprising:
Acquisition module, for obtaining the information of the software that will search;
Judge module, for according to the information of the described software that will search, and predefined local Sample Storehouse, judge in described local Sample Storehouse, whether there is the described software that will search;
Sending module, be used in the time that described judge module show that described local Sample Storehouse does not exist the described software that will search, the information of the described software that will search is sent to high in the clouds, so that the type of the described software that will search is determined in described high in the clouds according to the information of the described software that will search.
8. device according to claim 7, is characterized in that, also comprises:
Determination module, while there is the described software that will search for obtain described local Sample Storehouse at described judge module, according to the software information recording in described local Sample Storehouse and corresponding type, the type that will search software described in determining.
9. device according to claim 7, is characterized in that, also comprises:
Receiver module, for receiving the type of the described software that will search that described high in the clouds sends;
Logging modle, for by the type of the information of the described software that will search and the described software that will search, corresponding record is in described local Sample Storehouse.
10. according to the device described in claim 7 to 9 any one, it is characterized in that, in the described local Sample Storehouse that described judge module adopts, record the sample of the first kind and the sample of Second Type, so that in the time that the described software that will search belongs to the sample of the 3rd type, the information of the described software that will search is sent to high in the clouds, the sample of the described first kind is in-problem sample, the sample of described Second Type is normal sample, and the sample of described the 3rd type is the sample that does not belong to the sample of the described first kind and do not belong to described Second Type.
11. devices according to claim 10, is characterized in that, when initial, the number of the number of the sample of the described first kind and/or the sample of described Second Type is less than the number of setting.
12. devices according to claim 11, is characterized in that, when initial, the number of the sample of the described first kind is 0, and/or the number of the sample of described Second Type is 0.
CN201410067410.8A 2014-02-26 2014-02-26 Method and device for searching for software Pending CN103823871A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410067410.8A CN103823871A (en) 2014-02-26 2014-02-26 Method and device for searching for software

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410067410.8A CN103823871A (en) 2014-02-26 2014-02-26 Method and device for searching for software

Publications (1)

Publication Number Publication Date
CN103823871A true CN103823871A (en) 2014-05-28

Family

ID=50758935

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410067410.8A Pending CN103823871A (en) 2014-02-26 2014-02-26 Method and device for searching for software

Country Status (1)

Country Link
CN (1) CN103823871A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107066270A (en) * 2017-03-30 2017-08-18 努比亚技术有限公司 A kind of information collecting method and terminal
CN108516092A (en) * 2018-03-27 2018-09-11 钟静海 The pesticide spraying system of agricultural unmanned plane
CN108719242A (en) * 2018-03-27 2018-11-02 钟静海 Pesticide spraying system
CN108812589A (en) * 2018-03-27 2018-11-16 钟静海 Pesticide supply arrangement based on unmanned plane

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102081714A (en) * 2011-01-25 2011-06-01 潘燕辉 Cloud antivirus method based on server feedback
CN102346828A (en) * 2011-09-20 2012-02-08 海南意源高科技有限公司 Malicious program judging method based on cloud security
EP2490370A2 (en) * 2009-10-12 2012-08-22 Samsung S.D.S Co., Ltd. Method for providing an anti-malware service
CN103500305A (en) * 2013-09-04 2014-01-08 中国航天科工集团第二研究院七〇六所 System and method for malicious code analysis based on cloud computing
CN103530557A (en) * 2013-03-12 2014-01-22 Tcl集团股份有限公司 Method and system for scanning virus apk based on cloud terminal mass samples

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2490370A2 (en) * 2009-10-12 2012-08-22 Samsung S.D.S Co., Ltd. Method for providing an anti-malware service
CN102081714A (en) * 2011-01-25 2011-06-01 潘燕辉 Cloud antivirus method based on server feedback
CN102346828A (en) * 2011-09-20 2012-02-08 海南意源高科技有限公司 Malicious program judging method based on cloud security
CN103530557A (en) * 2013-03-12 2014-01-22 Tcl集团股份有限公司 Method and system for scanning virus apk based on cloud terminal mass samples
CN103500305A (en) * 2013-09-04 2014-01-08 中国航天科工集团第二研究院七〇六所 System and method for malicious code analysis based on cloud computing

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107066270A (en) * 2017-03-30 2017-08-18 努比亚技术有限公司 A kind of information collecting method and terminal
CN108516092A (en) * 2018-03-27 2018-09-11 钟静海 The pesticide spraying system of agricultural unmanned plane
CN108719242A (en) * 2018-03-27 2018-11-02 钟静海 Pesticide spraying system
CN108812589A (en) * 2018-03-27 2018-11-16 钟静海 Pesticide supply arrangement based on unmanned plane
CN108719242B (en) * 2018-03-27 2020-12-29 钟静海 Pesticide spraying system

Similar Documents

Publication Publication Date Title
US9398114B2 (en) Methods for automatically managing installed applications and determining application recommendation result based on auxiliary information and related computer readable media
US9097528B2 (en) Managing a datacenter using mobile devices
US20170371937A1 (en) Automated api publication for internet of things platform
CN103677880A (en) Information processing method and electronic equipment
CN104199706A (en) Firmware upgrade method and device for eMMC
CN103823871A (en) Method and device for searching for software
CN103049405B (en) Android device file management method and system
CN104317608A (en) Management method and device for pre-installed application program in mobile terminal and client
CN103530199A (en) Software running error repairing method, device and system
CN110737806A (en) Global ID generation method and device for business entity
CN104267980A (en) Software score display method, terminal, data server and system
CN103995845A (en) Information search method and device
CN103631603A (en) Software cleaning method and system
CN105404532A (en) Rejuvenation method and apparatus for software in terminal device and terminal device
CN104182330A (en) Application recommendation method and device and terminal
CN104881301A (en) Burning method and device for DSP (digital signal processing) chip program upgrading
CN104133703A (en) Method and device for determining software not used frequently
CN104881302A (en) Burning method and device for DSP chip program upgrading
CN103440146A (en) BIOS updating method based on cloud storage
CN103324890A (en) Method and device for detecting vulnerable local files of links
CN105260269A (en) Backup method and device as well as terminal for chatting records
CN105573872A (en) Hardware maintenance method and device of data storage system
CN109639827A (en) Client side upgrading method and device
CN105278992A (en) Firmware updating method and apparatus
CN103369520A (en) Intention prejudging system and method for application program suspicious behavior of mobile terminal

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20140528

RJ01 Rejection of invention patent application after publication