CN105095330A - Method and system for identifying file format based on compressed package content - Google Patents
Method and system for identifying file format based on compressed package content Download PDFInfo
- Publication number
- CN105095330A CN105095330A CN201410706064.3A CN201410706064A CN105095330A CN 105095330 A CN105095330 A CN 105095330A CN 201410706064 A CN201410706064 A CN 201410706064A CN 105095330 A CN105095330 A CN 105095330A
- Authority
- CN
- China
- Prior art keywords
- file
- compressed package
- package type
- identified
- format
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 34
- 230000006835 compression Effects 0.000 claims description 8
- 238000007906 compression Methods 0.000 claims description 8
- 239000000284 extract Substances 0.000 claims description 6
- 238000005516 engineering process Methods 0.000 abstract description 8
- 238000000605 extraction Methods 0.000 abstract description 4
- 238000007619 statistical method Methods 0.000 abstract 1
- 230000000875 corresponding effect Effects 0.000 description 10
- 230000006837 decompression Effects 0.000 description 4
- 238000010586 diagram Methods 0.000 description 4
- 230000001149 cognitive effect Effects 0.000 description 3
- 230000007812 deficiency Effects 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 2
- 238000010276 construction Methods 0.000 description 2
- 230000008878 coupling Effects 0.000 description 2
- 238000010168 coupling process Methods 0.000 description 2
- 238000005859 coupling reaction Methods 0.000 description 2
- 241000700605 Viruses Species 0.000 description 1
- 230000009471 action Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 230000002596 correlated effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
Landscapes
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention discloses a method for identifying a file format based on compressed package content. The method comprises a feature extraction stage and a file identification stage; the feature extraction stage comprises the steps of: obtaining a compressed package type file, extracting all the file names in the compressed package type file, carrying out statistical analysis to obtain a feature identifier of each compressed package format, and forming a feature library; the file identification stage comprises the steps of: obtaining a to-be-identified file, judging whether the to-be-identified file is in a compressed package type, obtaining all the file names contained in the to-be-identified file in the compressed package type, matching the file names with features in the feature library, and finally reporting the file format of the to-be-identified file. The invention also provides a system for identifying the file format based on the compressed package content, which remedies disadvantages of an existing format identifying technology that the specific compressed package format cannot be identified precisely, but only the compressed package file is displayed when the compressed package type is identified.
Description
Technical field
The present invention relates to filed of network information security, particularly relate to a kind of file layout recognition methods based on compressed package content and system.
Background technology
Format identification technology is the important basic technology of technical field of network information safety, and carry out of format identification to the follow-up work such as checking and killing virus, Hole Detection has very large booster action.At present conventional format identification technology has two kinds, and a kind of is identification based on suffix, and another kind is the identification based on file layout magic.Based on file layout suffix recognition technology, if do not have file suffixes, or suffix is modified, be then difficult to identify accurately the form of file to be identified.Knowing method for distinguishing based on file layout magic is file layout recognition methods main at present, the method is for the file layout using compressed package as bearer type, as helpless in office paper series form, APK file form etc., the result that these files carry out the identification of file layout magic is just designated compressed package usually.There are office paper series, pdf document, APK file etc. using compressed package as the file of carrier, these files all right and wrong files usually at present, and do not occur the technology of these files being carried out to Accurate identification at present.
Summary of the invention
Can not carry out the defect accurately identified to the file layout taking compressed package as carrier for prior art, the present invention proposes a kind of file layout recognition methods based on compressed package content and system.First compressed package type file is collected as training data, after decompress(ion) is carried out to compressed package type file, the file that one or more is total is all comprised in the compressed package type file of same format, the filename of these total files just can as the signature identification of corresponding compressed package type file form, obtain the signature identification of all compressed package type file forms in training data, itself and corresponding compressed package type file form are formed relation be organized into feature database one to one, the information comprised in feature database is not limited to described above.When carrying out file layout identification to file to be identified, first judge whether file is compressed package type, decompress(ion) carried out to the file to be identified of compressed package type and obtains the filename of All Files in compressed package, the filename of acquisition being mated with above-mentioned signature identification, and returns accordingly result.
The present invention proposes a kind of file layout recognition methods based on compressed package content, comprising:
Collect compressed package type file, and log file form;
Obtain the file name of All Files in compressed package type file;
The file name that contrast statistics obtains, obtains file name common in same file format compression Packet type file, obtains the signature identification of corresponding compressed package type file form based on total file name;
Generate the feature database in order to identify compressed package type file form, in feature database, mainly comprise the information of signature identification and compressed package type file form;
Obtain file to be identified, judge whether file to be identified is compressed package type file, if not, then report unidentified; If so, the file name of the All Files comprised in file to be identified is then obtained;
The file name of acquisition mated with the signature identification in feature database, if the match is successful, then corresponding according to described signature identification compressed package type file format information reports the file layout of file to be identified; If it fails to match, then report unidentified.
Further, different compressed package type file form characteristic of correspondence mark number is not less than 1.
Further, describedly judge whether file to be identified is compressed package type file, is specially: utilize file layout magic to know whether method for distinguishing is that compressed package type file judges to file to be identified.
Further, the file name of All Files and the file name obtaining in file to be identified the All Files comprised in described acquisition compressed package type file, be specially: according to different compressed format, imperfect decompress(ion) is carried out to compressed package type file and file to be identified, and extracts the file name of the All Files that it contains.
The present invention also proposes a kind of document format recognition system based on compressed package content, comprising:
Data acquisition module, for collecting compressed package type file, log file form, and the file name obtaining All Files in compressed package type file;
Feature generation module, for contrasting the file name that statistics obtains, obtain file name common in same file format compression Packet type file, the signature identification of corresponding compressed package type file form is obtained based on total file name, generate the feature database in order to identify compressed package type file form, in feature database, mainly comprise the information of signature identification and compressed package type file form;
File identification module, for obtaining file to be identified, judges whether file to be identified is compressed package type file, if not, then report unidentified, if so, then obtain the file name of the All Files comprised in file to be identified;
Format identification module, for the file name of acquisition being mated with the signature identification in feature database, if the match is successful, then corresponding according to described signature identification compressed package type file format information reports the file layout of file to be identified; If it fails to match, then report unidentified.
Further, different compressed package type file form characteristic of correspondence mark number is not less than 1.
Further, describedly judge whether file to be identified is compressed package type file, is specially: utilize file layout magic to know whether method for distinguishing is that compressed package type file judges to file to be identified.
Further, the file name of All Files and the file name obtaining in file to be identified the All Files comprised in described acquisition compressed package type file, be specially: according to different compressed format, imperfect decompress(ion) is carried out to compressed package type file and file to be identified, and extracts the file name of the All Files that it contains.
The invention has the beneficial effects as follows:
In current existing format identification technology, still immature to the format identification of the compressed package type file taking compressed package as carrier, file suffixes identification is utilized not identify file layout accurately and effectively, utilize the recognition methodss such as file layout magic identification, can not confirm the concrete file layout of compressed package type file accurately, usually the result returned just identifies compressed package, but can not identify concrete compressed package form.For above-mentioned deficiency of the prior art, the present invention proposes a kind of file layout recognition methods based on compressed package content and system, solve with compressed package the identification of the compressed package type file form being carrier, compensate for the technical deficiency of existing file format identification.Utilize the compressed package type file of all forms as training data, characteristic information in the feature database obtained is comprehensive and accurate, utilize the common documentary filename after the compressed package type file decompress(ion) of same format as the signature identification of coupling, make recognition result more accurate, when obtaining the All Files comprised in training data and file to be identified, the mode of imperfect compression is utilized to carry out decompress(ion) to compressed package type file, improve decompression rate, effectively save decompression time, improve recognition efficiency.
Accompanying drawing explanation
In order to be illustrated more clearly in the present invention or technical scheme of the prior art, be briefly described to the accompanying drawing used required in embodiment or description of the prior art below, apparently, the accompanying drawing that the following describes is only some embodiments recorded in the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.
Fig. 1 is the feature extracting method process flow diagram of the file layout identification that the present invention is based on compressed package content;
Fig. 2 is the cognitive phase method flow diagram of the file layout identification that the present invention is based on compressed package content;
Fig. 3 is the system construction drawing of the file layout identification that the present invention is based on compressed package content.
Embodiment
In order to make those skilled in the art person understand technical scheme in the embodiment of the present invention better, and enable above-mentioned purpose of the present invention, feature and advantage become apparent more, below in conjunction with accompanying drawing, technical scheme in the present invention is described in further detail.
The present invention gives a kind of embodiment of the method for the file layout identification based on compressed package content, comprise feature extraction phases and file layout cognitive phase, wherein the method flow diagram of feature extraction phases as shown in Figure 1, comprising:
S101: collect compressed package type file, and log file form, described compressed package type file comprises office series documentation, PDF document, APK file etc. using compressed package as the file of carrier, and described file layout comprises the file layouts such as .doc form .docx form .ppt form .pptx form .pdf form;
S102: the file name obtaining All Files in compressed package type file, comprises the file name of unique file and the title of file;
S103: the file name that contrast statistics obtains, obtain file name common in same file format compression Packet type file, the signature identification of corresponding compressed package type file form is obtained based on total file name, such as by contrast statistics, .docx in file, all include file is called the file of word, then namely filename word can be used as the signature identification of .docx file, .doc in file, all include file is called the file of WordDocument, then namely filename WordDocument can be used as the filename mark of .doc file, .ppt in file, all include file is called the file of PowerPointDocument, then namely filename PowerPointDocument can be used as the filename mark of .ppt file, described signature identification is not limited to the direct use shown in above-mentioned citing and has filename to substitute, also can be the feature be combined to form of total filename and other correlated characteristics,
S104: generate the feature database identifying compressed package type file form, mainly comprises the information of signature identification and compressed package type file form in feature database.
The cognitive phase method flow diagram of file layout identification as shown in Figure 2, comprising:
S201: obtain file to be identified;
S202: judge whether file to be identified is compressed package type file, if not, then enter step S207, if, then enter step S203, this deterministic process belongs to the preliminary process identifying file to be identified, such as, office series documentation before office2007 version, as .doc, .ppt the file of form is waited all to be compressed by .msi compressed package type, from office2007 version office series documentation till now, as .docx, .pptx the file of form is waited all to be compressed by .zip compressed package type, if file to be identified belongs to the file of .msi compressed package type, then the form of file to be identified is just likely the file layout in the office series documentation before office2007 version, the compressed package type of this step identification is not limited to .msi and .zip,
S203: the file name obtaining the All Files comprised in file to be identified, comprises the file name of unique file and the title of file;
S204: the file name of acquisition is mated with the signature identification in feature database;
S205: according to the matching result of S204, if the match is successful, then enters step S206, if it fails to match, then enters step S207;
S206: the compressed package type file format information corresponding according to described signature identification reports the file layout of file to be identified;
S207: report unidentified.
Preferably, different compressed package type file form characteristic of correspondence mark number is not less than 1, and such as, the signature identification of the APK file obtained by statistical study has two, AndroidManifest.xml and classes.dex.
Preferably, describedly judge whether file to be identified is compressed package type file, is specially: utilize file layout magic to know whether method for distinguishing is that compressed package type file judges to file to be identified.
Preferably, the file name of All Files and the file name obtaining in file to be identified the All Files comprised in described acquisition compressed package type file, be specially: according to different compressed format, imperfect decompress(ion) is carried out to compressed package type file and file to be identified, and extracts the file name of the All Files that it contains.
The present invention gives a kind of system construction drawing of the file layout identification based on compressed package content, as shown in Figure 3, comprising:
Data acquisition module 301, for collecting compressed package type file, log file form, and the file name obtaining All Files in compressed package type file;
Feature generation module 302, for contrasting the file name that statistics obtains, obtain file name common in same file format compression Packet type file, the signature identification of corresponding compressed package type file form is obtained based on total file name, generate the feature database in order to identify compressed package type file form, in feature database, mainly comprise the information of signature identification and compressed package type file form;
File identification module 303, for obtaining file to be identified, judges whether file to be identified is compressed package type file, if not, then report unidentified, if so, then obtain the file name of the All Files comprised in file to be identified;
Format identification module 304, for the file name of acquisition being mated with the signature identification in feature database, if the match is successful, then corresponding according to described signature identification compressed package type file format information reports the file layout of file to be identified; If it fails to match, then report unidentified.
Preferably, different compressed package type file form characteristic of correspondence mark number is not less than 1.
Preferably, describedly judge whether file to be identified is compressed package type file, is specially: utilize file layout magic to know whether method for distinguishing is that compressed package type file judges to file to be identified.
Preferably, the file name of All Files and the file name obtaining in file to be identified the All Files comprised in described acquisition compressed package type file, be specially: according to different compressed format, imperfect decompress(ion) is carried out to compressed package type file and file to be identified, and extracts the file name of the All Files that it contains.
In this instructions, the embodiment of method adopts the mode of going forward one by one to describe, and for the embodiment of system, because it is substantially similar to embodiment of the method, so description is fairly simple, relevant part illustrates see the part of embodiment of the method.The present invention proposes a kind of file layout recognition methods based on compressed package content and system, solve with compressed package the identification of the compressed package type file form being carrier, compensate for existing file format identification and can only be shown as to compressed package type file the deficiency that compressed package but accurately can not provide concrete compressed package form.Utilize the compressed package type file of all forms as training data, characteristic information in the feature database obtained is comprehensive and accurate, utilize the common documentary filename after the compressed package type file decompress(ion) of same format as the signature identification of coupling, make recognition result more accurate, when obtaining the All Files comprised in training data and file to be identified, the mode of imperfect compression is utilized to carry out decompress(ion) to compressed package type file, improve decompression rate, effectively save decompression time, improve recognition efficiency.
Although depict the present invention by embodiment, those of ordinary skill in the art know, the present invention has many distortion and change and do not depart from spirit of the present invention, and the claim appended by wishing comprises these distortion and change and do not depart from spirit of the present invention.
Claims (8)
1., based on a file layout recognition methods for compressed package content, it is characterized in that, comprising:
Collect compressed package type file, and log file form;
Obtain the file name of All Files in compressed package type file;
The file name that contrast statistics obtains, obtains file name common in same file format compression Packet type file, obtains the signature identification of corresponding compressed package type file form based on total file name;
Generate the feature database in order to identify compressed package type file form, in feature database, mainly comprise the information of signature identification and compressed package type file form;
Obtain file to be identified, judge whether file to be identified is compressed package type file, if not, then report unidentified; If so, the file name of the All Files comprised in file to be identified is then obtained;
The file name of acquisition mated with the signature identification in feature database, if the match is successful, then corresponding according to described signature identification compressed package type file format information reports the file layout of file to be identified; If it fails to match, then report unidentified.
2. the method for claim 1, is characterized in that, different compressed package type file form characteristic of correspondence mark number is not less than 1.
3. the method for claim 1, is characterized in that, describedly judges whether file to be identified is compressed package type file, is specially: utilize file layout magic to know whether method for distinguishing is that compressed package type file judges to file to be identified.
4. the method for claim 1, it is characterized in that, the file name of All Files and the file name obtaining in file to be identified the All Files comprised in described acquisition compressed package type file, be specially: according to different compressed format, imperfect decompress(ion) is carried out to compressed package type file and file to be identified, and extracts the file name of the All Files that it contains.
5. based on a document format recognition system for compressed package content, it is characterized in that, comprising:
Data acquisition module, for collecting compressed package type file, log file form, and the file name obtaining All Files in compressed package type file;
Feature generation module, the file name that contrast statistics obtains, obtain file name common in same file format compression Packet type file, the signature identification of corresponding compressed package type file form is obtained based on total file name, generate the feature database in order to identify compressed package type file form, in feature database, mainly comprise the information of signature identification and compressed package type file form;
File identification module, for obtaining file to be identified, judges whether file to be identified is compressed package type file, if not, then report unidentified, if so, then obtain the file name of the All Files comprised in file to be identified;
Format identification module, for the file name of acquisition being mated with the signature identification in feature database, if the match is successful, then corresponding according to described signature identification compressed package type file format information reports the file layout of file to be identified; If it fails to match, then report unidentified.
6. system as claimed in claim 5, is characterized in that, different compressed package type file form characteristic of correspondence mark number is not less than 1.
7. system as claimed in claim 5, is characterized in that, describedly judges whether file to be identified is compressed package type file, is specially: utilize file layout magic to know whether method for distinguishing is that compressed package type file judges to file to be identified.
8. system as claimed in claim 5, it is characterized in that, the file name of All Files and the file name obtaining in file to be identified the All Files comprised in described acquisition compressed package type file, be specially: according to different compressed format, imperfect decompress(ion) is carried out to compressed package type file and file to be identified, and extracts the file name of the All Files that it contains.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410706064.3A CN105095330B (en) | 2014-12-01 | 2014-12-01 | A kind of file format recognition methods and system based on compressed package content |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410706064.3A CN105095330B (en) | 2014-12-01 | 2014-12-01 | A kind of file format recognition methods and system based on compressed package content |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105095330A true CN105095330A (en) | 2015-11-25 |
| CN105095330B CN105095330B (en) | 2019-05-07 |
Family
ID=54575774
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410706064.3A Active CN105095330B (en) | 2014-12-01 | 2014-12-01 | A kind of file format recognition methods and system based on compressed package content |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105095330B (en) |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106844476A (en) * | 2016-12-23 | 2017-06-13 | 上海上讯信息技术股份有限公司 | A kind of method and apparatus for recognizing file format and correspondence integrality |
| CN107292171A (en) * | 2016-04-13 | 2017-10-24 | 阿里巴巴集团控股有限公司 | Method, method for detecting virus and device for recognizing compressed file subtype |
| CN110020665A (en) * | 2019-02-12 | 2019-07-16 | 北京鑫汇普瑞科技发展有限公司 | A kind of microbial biomass modal data analysis method being compatible with different flight mass spectrometers |
| CN111159758A (en) * | 2019-12-18 | 2020-05-15 | 深信服科技股份有限公司 | Identification method, device and storage medium |
| CN111352912A (en) * | 2020-03-10 | 2020-06-30 | Oppo广东移动通信有限公司 | Compressed file processing method, device, storage medium, terminal and server |
| CN111552670A (en) * | 2020-04-30 | 2020-08-18 | 福建天晴在线互动科技有限公司 | Method and system for expanding and supporting compressed file and decompressed file |
| CN112580057A (en) * | 2020-12-17 | 2021-03-30 | 光通天下网络科技股份有限公司 | Attack vulnerability detection method, device, equipment and medium for ZIP encrypted compressed packet |
| CN113051242A (en) * | 2019-12-27 | 2021-06-29 | 北京国双科技有限公司 | Document type identification method, device, equipment and computer readable storage medium |
| CN116226046A (en) * | 2023-03-16 | 2023-06-06 | 北京中宏立达科技发展有限公司 | File type detection method and system |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20020143797A1 (en) * | 2001-03-29 | 2002-10-03 | Ibm | File classification management system and method used in operating systems |
| CN101068296A (en) * | 2007-05-23 | 2007-11-07 | 西安邮电学院 | A non-real time network facsimile file layout converting method |
| CN101447006A (en) * | 2008-12-30 | 2009-06-03 | 深圳市迅雷网络技术有限公司 | Method for providing file security information and security information processing system |
| CN101576908A (en) * | 2009-03-12 | 2009-11-11 | 北京中星微电子有限公司 | Method and system for acquiring file handle by file name |
| CN101770470A (en) * | 2008-12-31 | 2010-07-07 | 中国银联股份有限公司 | File type identifying and analyzing method and system |
| CN102467495A (en) * | 2011-09-08 | 2012-05-23 | 中标软件有限公司 | Method for handwriting comment for odt format file |
| CN102663281A (en) * | 2012-03-16 | 2012-09-12 | 成都市华为赛门铁克科技有限公司 | Method and device for detecting malicious software |
| CN103631589A (en) * | 2013-11-08 | 2014-03-12 | 华为技术有限公司 | Method and device for recognizing application |
| CN103646062A (en) * | 2013-12-02 | 2014-03-19 | 北京奇虎科技有限公司 | Scanning method and device for downloaded file |
| US20140304818A1 (en) * | 2011-09-30 | 2014-10-09 | Tencent Technology (Shenzhen) Company Limited | Method and Device for Multiple Engine Virus Killing |
-
2014
- 2014-12-01 CN CN201410706064.3A patent/CN105095330B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20020143797A1 (en) * | 2001-03-29 | 2002-10-03 | Ibm | File classification management system and method used in operating systems |
| CN101068296A (en) * | 2007-05-23 | 2007-11-07 | 西安邮电学院 | A non-real time network facsimile file layout converting method |
| CN101447006A (en) * | 2008-12-30 | 2009-06-03 | 深圳市迅雷网络技术有限公司 | Method for providing file security information and security information processing system |
| CN101770470A (en) * | 2008-12-31 | 2010-07-07 | 中国银联股份有限公司 | File type identifying and analyzing method and system |
| CN101576908A (en) * | 2009-03-12 | 2009-11-11 | 北京中星微电子有限公司 | Method and system for acquiring file handle by file name |
| CN102467495A (en) * | 2011-09-08 | 2012-05-23 | 中标软件有限公司 | Method for handwriting comment for odt format file |
| US20140304818A1 (en) * | 2011-09-30 | 2014-10-09 | Tencent Technology (Shenzhen) Company Limited | Method and Device for Multiple Engine Virus Killing |
| CN102663281A (en) * | 2012-03-16 | 2012-09-12 | 成都市华为赛门铁克科技有限公司 | Method and device for detecting malicious software |
| CN103631589A (en) * | 2013-11-08 | 2014-03-12 | 华为技术有限公司 | Method and device for recognizing application |
| CN103646062A (en) * | 2013-12-02 | 2014-03-19 | 北京奇虎科技有限公司 | Scanning method and device for downloaded file |
Cited By (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107292171A (en) * | 2016-04-13 | 2017-10-24 | 阿里巴巴集团控股有限公司 | Method, method for detecting virus and device for recognizing compressed file subtype |
| CN106844476A (en) * | 2016-12-23 | 2017-06-13 | 上海上讯信息技术股份有限公司 | A kind of method and apparatus for recognizing file format and correspondence integrality |
| CN110020665A (en) * | 2019-02-12 | 2019-07-16 | 北京鑫汇普瑞科技发展有限公司 | A kind of microbial biomass modal data analysis method being compatible with different flight mass spectrometers |
| CN111159758A (en) * | 2019-12-18 | 2020-05-15 | 深信服科技股份有限公司 | Identification method, device and storage medium |
| CN113051242A (en) * | 2019-12-27 | 2021-06-29 | 北京国双科技有限公司 | Document type identification method, device, equipment and computer readable storage medium |
| CN111352912A (en) * | 2020-03-10 | 2020-06-30 | Oppo广东移动通信有限公司 | Compressed file processing method, device, storage medium, terminal and server |
| CN111352912B (en) * | 2020-03-10 | 2024-04-12 | Oppo广东移动通信有限公司 | Compressed file processing method, device, storage medium, terminal and server |
| CN111552670A (en) * | 2020-04-30 | 2020-08-18 | 福建天晴在线互动科技有限公司 | Method and system for expanding and supporting compressed file and decompressed file |
| CN112580057A (en) * | 2020-12-17 | 2021-03-30 | 光通天下网络科技股份有限公司 | Attack vulnerability detection method, device, equipment and medium for ZIP encrypted compressed packet |
| CN116226046A (en) * | 2023-03-16 | 2023-06-06 | 北京中宏立达科技发展有限公司 | File type detection method and system |
| CN116226046B (en) * | 2023-03-16 | 2023-09-08 | 北京中宏立达科技发展有限公司 | File type detection method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105095330B (en) | 2019-05-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105095330A (en) | Method and system for identifying file format based on compressed package content | |
| US20190197174A1 (en) | Method and system for replicating data to heterogeneous database and detecting synchronization error of heterogeneous database through sql packet analysis | |
| CN106815326B (en) | System and method for detecting consistency of data table without main key | |
| CN103064764A (en) | Evidence obtaining method capable of rapidly recovering messages deleted by Android mobile phone | |
| CN106572048A (en) | Identification method and system of user information in social network | |
| CN106294222A (en) | A kind of method and device determining PCIE device and slot corresponding relation | |
| CN108228726B (en) | Incremental transaction content acquisition method and storage medium for distribution network red and black images | |
| CN102346153A (en) | Method for detecting tunnel defect | |
| CN103366247A (en) | Standard effectiveness judging system and method | |
| CN107347016B (en) | Signaling flow model identification method and abnormal signaling flow identification method | |
| CN105488405A (en) | PDB debug information based malicious code analysis method and system | |
| CN110929110B (en) | Electronic document detection method, device, equipment and storage medium | |
| CN105930313A (en) | Method and device for processing notification message | |
| CN103345523B (en) | A kind of peer review system based on cloud computing | |
| CN103902906A (en) | Mobile terminal malicious code detecting method and system based on application icon | |
| CN110188328B (en) | File structuring processing method and device | |
| KR20120003567A (en) | Log management system, log processing method of the same of and recording medium storing the log processing method of the same of | |
| CN103853933A (en) | Android digital forensics-oriented user behavior analysis method and system | |
| CN107491530B (en) | Social relationship mining analysis method based on file automatic marking information | |
| CN107506339B (en) | Character offset-based SCD node verification error positioning method and device | |
| CN105049437A (en) | Method for filtering data of network application layer | |
| CN103699482A (en) | Method and device for testing reasonableness of controls | |
| CN112364121B (en) | Automatic questionnaire PDF creation method and device, storage medium and computer equipment | |
| KR20180043922A (en) | METHOD, APPARATUS AND COMPUTER PROGRAM FOR RECOVERING THE DELETED RECORD IN ABNORMAL PAGE AND JOURNAL FILE OF SQLite | |
| CN107391695A (en) | A kind of information extracting method based on big data |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address | ||
| CP03 | Change of name, title or address |
Address after: 150028 Building 7, Innovation Plaza, Science and Technology Innovation City, Harbin Hi-tech Industrial Development Zone, Heilongjiang Province (838 Shikun Road) Patentee after: Harbin antiy Technology Group Limited by Share Ltd Address before: 150090 room 506, Hongqi Street, Nangang District, Harbin Development Zone, Heilongjiang, China, 162 Patentee before: Harbin Antiy Technology Co., Ltd. |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: Method and system for identifying file format based on compressed package content Effective date of registration: 20190828 Granted publication date: 20190507 Pledgee: Bank of Longjiang, Limited by Share Ltd, Harbin Limin branch Pledgor: Harbin antiy Technology Group Limited by Share Ltd Registration number: Y2019230000002 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right | ||
| CP01 | Change in the name or title of a patent holder |
Address after: 150028 building 7, innovation and entrepreneurship square, science and technology innovation city, Harbin high tech Industrial Development Zone, Heilongjiang Province (No. 838, Shikun Road) Patentee after: Antan Technology Group Co.,Ltd. Address before: 150028 building 7, innovation and entrepreneurship square, science and technology innovation city, Harbin high tech Industrial Development Zone, Heilongjiang Province (No. 838, Shikun Road) Patentee before: Harbin Antian Science and Technology Group Co.,Ltd. |
|
| CP01 | Change in the name or title of a patent holder | ||
| PC01 | Cancellation of the registration of the contract for pledge of patent right |
Date of cancellation: 20211119 Granted publication date: 20190507 Pledgee: Bank of Longjiang Limited by Share Ltd. Harbin Limin branch Pledgor: Harbin Antian Science and Technology Group Co.,Ltd. Registration number: Y2019230000002 |
|
| PC01 | Cancellation of the registration of the contract for pledge of patent right |