CN106845227A - A kind of malicious script detection method and system based on ragel state machines - Google Patents
A kind of malicious script detection method and system based on ragel state machines Download PDFInfo
- Publication number
- CN106845227A CN106845227A CN201611228959.6A CN201611228959A CN106845227A CN 106845227 A CN106845227 A CN 106845227A CN 201611228959 A CN201611228959 A CN 201611228959A CN 106845227 A CN106845227 A CN 106845227A
- Authority
- CN
- China
- Prior art keywords
- ragel
- file
- detected
- script
- feature database
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
Abstract
The present invention proposes a kind of malicious script detection method and system based on ragel state machines, by parsing known malicious script file, extracts malice character string ragel regular expressions composition detection feature database source file；And the detection feature database source file is compiled as the language of script file to be detected；Using ragel canonical state machine testing script files to be detected；Judge whether script file to be detected matches with the ragel regular expressions in detection feature database source file, if it is, the script file to be detected is malice, otherwise described script file to be detected is ordinary file.By technical scheme, full-text search all is carried out to file to be detected without every feature, can accelerate to detect the speed of malicious script, and the technical program make use of ragel finite state machine compilers, the detection source file under different target language can be generated, applicable surface is more extensive.
Description
Technical field
The present invention relates to computer network security field, more particularly to a kind of malicious script inspection based on ragel state machines
Survey method and system.
Background technology
Existing known malicious script is generally javascript, Visual Basic Script, HTML, python, java
Deng, these malicious codes are often encrypted to code obscures treatment, after reducing true script, the behaviour such as general mostly download wooden horse
Make.Malicious script is different from traditional virus, and it has the characteristics of deforming simple, is hidden certainly by diversified obfuscation mechanisms
Oneself, it can also dynamic creation embedded link, and encode linked contents.
Ragel is a finite state machine compiler, can be by based on regular expression, (ragel regular expressions are similar to one
As regular expression, but grammer has a small amount of difference) state machine be compiled into conventional language（Such as C, C++, D, Java, Ruby
Deng）Resolver.Ragel not only can be used to parse byte stream, and it can essentially parse and any can use regular expressions
The content that formula is expressed, and very easily parsing code can be embedded into conventional language.
The existing detection method for malicious script is mainly and detected using characteristic matching or using the method for machine learning
Detected.
Malicious script detection is carried out mainly according to known malicious script Sample Storehouse program code in itself using condition code
Feature detects whether unknown script program is malicious script program, and mainly script is parsed, and extracts malice in script
Code characteristic, and these features and the feature set for filtering out are compared, shell script is determined if code characteristic matches
Justice is malicious script, otherwise is then common shell script.Its defect is the condition code extracted often a certain section of character in script
The HASH of string extracts one section of canonical feature, and because script is textual form, its characteristic matching generally requires to search full text
Rope is matched, and with the increase of characteristic quantity, detection needs are consumed a longer time.
The shortcoming for carrying out malicious script detection using the method for machine learning is to need to learn a large amount of malicious scripts,
Continuous iteration, rate of false alarm is of a relatively high.
The content of the invention
The present invention proposes a kind of malicious script detection method and system based on ragel state machines, solves existing script
Detection method efficiency is low, rate of false alarm problem high, realizes the quick detection to script file.
Present invention firstly provides a kind of malicious script detection method based on ragel state machines, including：
Parsing known malicious script file, extracts malice character string ragel regular expressions；
The malice character string ragel regular expressions composition detection feature database source file that will be extracted；
The detection feature database source file is compiled as the language of script file to be detected；
Detection feature database source file after compiling is integrated into the detection module of script file to be detected；
Obtain and load script file to be detected；
Using ragel canonical state machine testing script files to be detected；
Judge script file to be detected with detection feature database source file in malice character string ragel regular expressions whether
Match somebody with somebody, if it is, the script file to be detected is malice, otherwise described script file to be detected is ordinary file.
In described method, known malicious script file is parsed, extract malice character string ragel regular expressions specific
For：According to malicious code family or variety classification parsing malicious script file, non-malicious code section is removed, retain malicious code
Part；And there is the malicious code part of general character according to malicious code family or mutation, extract one or more ragel canonical tables
Up to formula.
In described method, the malice character string ragel regular expressions composition detection feature database source that will be extracted
File is specially：Using ragel state machines syntax format construction detection feature database source file.
In described method, the input of the detection interface of the detection feature database source file is script file to be detected
Buf and size, are output as testing result and viral name.
It is described to judge script file to be detected and detect the ragel canonical tables in feature database source file in described method
Whether matched up to formula, specifically, judging whether there is one or more in script file to be detected and detection feature database source file
Ragel regular expressions are identical, if it is match.
The present invention also proposes a kind of malicious script detecting system based on ragel state machines simultaneously, including：
Parsing module, for parsing known malicious script file, extracts malice character string ragel regular expressions；
Generation library module, for the malice character string ragel regular expressions composition detection feature database source file that will be extracted；
Collector, the language for the detection feature database source file to be compiled as script file to be detected；
Integration module, for the detection feature database source file after compiling to be integrated into the detection module of script file to be detected；
Acquisition module, for obtaining and loads script file to be detected；
Detection module, for utilizing ragel canonical state machine testing script files to be detected；
Judge module, for judging script file to be detected and detecting the malice character string ragel canonicals in feature database source file
Whether expression formula matches, if it is, the script file to be detected is malice, otherwise described script file to be detected is common
File.
In described system, known malicious script file is parsed, extract malice character string ragel regular expressions specific
For：According to malicious code family or variety classification parsing malicious script file, non-malicious code section is removed, retain malicious code
Part；And there is the malicious code part of general character according to malicious code family or mutation, extract one or more ragel canonical tables
Up to formula.
In described system, the malice character string ragel regular expressions composition detection feature database source that will be extracted
File is specially：Using ragel state machines syntax format construction detection feature database source file.
In described system, the input of the detection interface of the detection feature database source file is script file to be detected
Buf and size, are output as testing result and viral name.
It is described to judge script file to be detected and detect the ragel canonical tables in feature database source file in described system
Whether matched up to formula, specifically, judging whether there is one or more in script file to be detected and detection feature database source file
Ragel regular expressions are identical, if it is match.
It is of the invention it is critical that ragel regular expressions by extracting malicious script difference family, set up it is vertical by
The detection feature database of ragel regular expressions composition, by ragel finite state machines compiler by the detection feature of malicious script
Storehouse is compiled as file destination language, by the integrated detection feature database, you can carry out the inspection of script file using finite state machine
Survey.The invention has the advantages that, due to being detected based on canonical state machine, all treat detection script file without every feature and enter
Row full-text search, cluster training is carried out without to a large amount of malicious scripts, and its detection speed is than general feature matching detection and machine
Device learning detection method is all fast a lot.In addition compared with other script detection methods, using ragel state machine compilers, can give birth to
Source file is detected into the malicious script under different target language, the script detection module that any different language is write can be integrated in
In, applicable surface is also therefore more extensive.
The present invention proposes a kind of extraction malicious script ragel canonical condition codes, is compiled by ragel state machines compiler
The malicious script detection source file of programming language, can be used for quickly detecting, its inspection using the original to malicious script for needed for
Degree of testing the speed carries out the malicious script detection method of string matching or canonical matching far above condition code is relied solely on, while our
Method can quickly issue ragel canonical condition codes, and the rate of false alarm detected to malicious script is than relatively low.Other this method is being extracted
During malicious script ragel features, it is not limited to extract a certain bar canonical feature, and can be to extract multiple to same family
Ragel regular expressions.
Brief description of the drawings
In order to illustrate more clearly of technical scheme of the invention or of the prior art, below will be to embodiment or prior art
The accompanying drawing to be used needed for description is briefly described, it should be apparent that, during drawings in the following description are only the present invention
Some embodiments recorded, for those of ordinary skill in the art, on the premise of not paying creative work, can be with
Other accompanying drawings are obtained according to these accompanying drawings.
Fig. 1 is a kind of malicious script detection method embodiment flow chart based on ragel state machines of the present invention；
Fig. 2 is a kind of malicious script detecting system example structure schematic diagram based on ragel state machines of the present invention.
Specific embodiment
In order that those skilled in the art more fully understand the technical scheme in the embodiment of the present invention, and make of the invention
Above-mentioned purpose, feature and advantage can be more obvious understandable, and technical scheme in the present invention is made further in detail below in conjunction with the accompanying drawings
Thin explanation.
The present invention proposes a kind of malicious script detection method and system based on ragel state machines, solves existing script
Detection method efficiency is low, rate of false alarm problem high, realizes the quick detection to script file.
Present invention firstly provides a kind of malicious script detection method based on ragel state machines, as shown in figure 1, including：
S101：Parsing known malicious script file, extracts malice character string ragel regular expressions；
S102：The malice character string ragel regular expressions composition detection feature database source file that will be extracted；
S103：The detection feature database source file is compiled as the language of script file to be detected；Feature database source document will such as be detected
Part is compiled as the detection feature database source file that C language is write；Certainly also include other conventional languages, such as C++, D, Java, Ruby,
Python etc.；
S104：Detection feature database source file after compiling is integrated into the detection module of script file to be detected；
S105：Obtain and load script file to be detected；Script file to be detected is loaded into internal memory；
S106：Using ragel canonical state machine testing script files to be detected；Using the inspection for being integrated with detection feature database source file
Module is surveyed, using ragel canonical state machines, the script file to be detected to being carried in internal memory is used for quickly detecting；
S107：Judge script file to be detected is with the malice character string ragel regular expressions in detection feature database source file
No matching, if it is, the script file to be detected is malice, otherwise described script file to be detected is ordinary file.
In described method, known malicious script file is parsed, extract malice character string ragel regular expressions specific
For：According to malicious code family or variety classification parsing malicious script file, non-malicious code section is removed, retain malicious code
Part, such as encrypts the malicious code part obscured；And there is the malicious code part of general character according to malicious code family or mutation,
Extract one or more ragel regular expressions.Extracting a plurality of ragel regular expressions mainly prevents wrong report, a plurality of canonical table
Regular expression feature group can be constituted up to formula, when matching a plurality of regular expression simultaneously in script file, just be can determine that
It is malice.
In described method, the malice character string ragel regular expressions composition detection feature database source that will be extracted
File is specially：Using ragel state machines syntax format construction detection feature database source file.
In described method, the input of the detection interface of the detection feature database source file is script file to be detected
Buf and size, are output as testing result and viral name.
It is described to judge script file to be detected and detect the ragel canonical tables in feature database source file in described method
Whether matched up to formula, specifically, judging whether there is one or more in script file to be detected and detection feature database source file
Ragel regular expressions are identical, if it is match.
The present invention also proposes a kind of malicious script detecting system based on ragel state machines simultaneously, as shown in Fig. 2 including：
Parsing module 201, for parsing known malicious script file, extracts malice character string ragel regular expressions；
Generation library module 202, for the malice character string ragel regular expressions composition detection feature database source document that will be extracted
Part；
Collector 203, the language for the detection feature database source file to be compiled as script file to be detected；
Integration module 204, the detection module for the detection feature database source file after compiling to be integrated into script file to be detected
In；
Acquisition module 205, for obtaining and loads script file to be detected；
Detection module 206, for utilizing ragel canonical state machine testing script files to be detected；
Judge module 207, for judging script file to be detected with the malice character string ragel detected in feature database source file just
Then whether expression formula matches, if it is, the script file to be detected is malice, otherwise described script file to be detected is general
Logical file.
In described system, known malicious script file is parsed, extract malice character string ragel regular expressions specific
For：According to malicious code family or variety classification parsing malicious script file, non-malicious code section is removed, retain malicious code
Part；And there is the malicious code part of general character according to malicious code family or mutation, extract one or more ragel canonical tables
Up to formula.
In described system, the malice character string ragel regular expressions composition detection feature database source that will be extracted
File is specially：Using ragel state machines syntax format construction detection feature database source file.
In described system, the input of the detection interface of the detection feature database source file is script file to be detected
Buf and size, are output as testing result and viral name.
It is described to judge script file to be detected and detect the ragel canonical tables in feature database source file in described system
Whether matched up to formula, specifically, judging whether there is one or more in script file to be detected and detection feature database source file
Ragel regular expressions are identical, if it is match.
It is of the invention it is critical that ragel regular expressions by extracting malicious script difference family, set up it is vertical by
The detection feature database of ragel regular expressions composition, by ragel finite state machines compiler by the detection feature of malicious script
Storehouse is compiled as file destination language, by the integrated detection feature database, you can carry out the inspection of script file using finite state machine
Survey.The invention has the advantages that, due to being detected based on canonical state machine, all treat detection script file without every feature and enter
Row full-text search, cluster training is carried out without to a large amount of malicious scripts, and its detection speed is than general feature matching detection and machine
Device learning detection method is all fast a lot.In addition compared with other script detection methods, using ragel state machine compilers, can give birth to
Source file is detected into the malicious script under different target language, the script detection module that any different language is write can be integrated in
In, applicable surface is also therefore more extensive, and such as javascript, Visual Basic Script, HTML, pthon, java are each
Type.
The present invention proposes a kind of extraction malicious script ragel canonical condition codes, is compiled by ragel state machines compiler
The malicious script detection source file of programming language, can be used for quickly detecting, its inspection using the original to malicious script for needed for
Degree of testing the speed carries out the malicious script detection method of string matching or canonical matching far above condition code is relied solely on, while our
Method can quickly issue ragel canonical condition codes, and the rate of false alarm detected to malicious script is than relatively low.Other this method is being extracted
During malicious script ragel features, it is not limited to extract a certain bar canonical feature, and can be to extract multiple to same family
Ragel regular expressions.
Although depicting the present invention by embodiment, it will be appreciated by the skilled addressee that the present invention have it is many deformation and
Change is without deviating from spirit of the invention, it is desirable to which appended claim includes these deformations and changes without deviating from of the invention
Spirit.
Claims (10)
1. a kind of malicious script detection method based on ragel state machines, it is characterised in that including：
Parsing known malicious script file, extracts malice character string ragel regular expressions；
The malice character string ragel regular expressions composition detection feature database source file that will be extracted；
The detection feature database source file is compiled as the language of script file to be detected；
Detection feature database source file after compiling is integrated into the detection module of script file to be detected；
Obtain and load script file to be detected；
Using ragel canonical state machine testing script files to be detected；
Judge script file to be detected with detection feature database source file in malice character string ragel regular expressions whether
Match somebody with somebody, if it is, the script file to be detected is malice, otherwise described script file to be detected is ordinary file.
2. the method for claim 1, it is characterised in that parsing known malicious script file, extracts malice character string
Ragel regular expressions are specially：According to malicious code family or variety classification parsing malicious script file, non-malicious generation is removed
Code part, retains malicious code part；And there is the malicious code part of general character according to malicious code family or mutation, extract one
Bar or a plurality of ragel regular expressions.
3. the method for claim 1, it is characterised in that the malice character string ragel regular expressions that will be extracted
Formula composition detection feature database source file is specially：Using ragel state machines syntax format construction detection feature database source file.
4. method as claimed in claim 3, it is characterised in that the input of the detection interface of the detection feature database source file is
The buf and size of script file to be detected, are output as testing result and viral name.
5. the method for claim 1, it is characterised in that the judgement script file to be detected and detection feature database source document
Whether the ragel regular expressions in part match, specifically, judge script file to be detected and detection feature database source file in be
It is no to have one or more ragel regular expressions identical, if it is match.
6. a kind of malicious script detecting system based on ragel state machines, it is characterised in that including：
Parsing module, for parsing known malicious script file, extracts malice character string ragel regular expressions；
Generation library module, for the malice character string ragel regular expressions composition detection feature database source file that will be extracted；
Collector, the language for the detection feature database source file to be compiled as script file to be detected；
Integration module, for the detection feature database source file after compiling to be integrated into the detection module of script file to be detected；
Acquisition module, for obtaining and loads script file to be detected；
Detection module, for utilizing ragel canonical state machine testing script files to be detected；
Judge module, for judging script file to be detected and detecting the malice character string ragel canonicals in feature database source file
Whether expression formula matches, if it is, the script file to be detected is malice, otherwise described script file to be detected is common
File.
7. system as claimed in claim 6, it is characterised in that parsing known malicious script file, extracts malice character string
Ragel regular expressions are specially：According to malicious code family or variety classification parsing malicious script file, non-malicious generation is removed
Code part, retains malicious code part；And there is the malicious code part of general character according to malicious code family or mutation, extract one
Bar or a plurality of ragel regular expressions.
8. system as claimed in claim 6, it is characterised in that the malice character string ragel regular expressions that will be extracted
Formula composition detection feature database source file is specially：Using ragel state machines syntax format construction detection feature database source file.
9. system as claimed in claim 8, it is characterised in that the input of the detection interface of the detection feature database source file is
The buf and size of script file to be detected, are output as testing result and viral name.
10. system as claimed in claim 6, it is characterised in that the judgement script file to be detected and detection feature database source
Whether the ragel regular expressions in file match, specifically, in judging script file to be detected and detection feature database source file
Whether there are one or more ragel regular expressions identical, if it is match.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611228959.6A CN106845227B (en) | 2016-12-27 | 2016-12-27 | A kind of malicious script detection method and system based on ragel state machine |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611228959.6A CN106845227B (en) | 2016-12-27 | 2016-12-27 | A kind of malicious script detection method and system based on ragel state machine |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106845227A true CN106845227A (en) | 2017-06-13 |
| CN106845227B CN106845227B (en) | 2019-09-13 |
Family
ID=59113438
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201611228959.6A Active CN106845227B (en) | 2016-12-27 | 2016-12-27 | A kind of malicious script detection method and system based on ragel state machine |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106845227B (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108959925A (en) * | 2018-06-22 | 2018-12-07 | 珠海市君天电子科技有限公司 | A kind of detection method of malicious script, device, electronic equipment and storage medium |
| CN109271315A (en) * | 2018-08-23 | 2019-01-25 | 中国平安财产保险股份有限公司 | Scripted code detection method, device, computer equipment and storage medium |
| CN110086811A (en) * | 2019-04-29 | 2019-08-02 | 深信服科技股份有限公司 | A kind of malicious script detection method and relevant apparatus |
| CN110147671A (en) * | 2019-05-29 | 2019-08-20 | 北京奇安信科技有限公司 | Text string extracting method and device in a kind of program |
| CN110765455A (en) * | 2018-09-04 | 2020-02-07 | 哈尔滨安天科技集团股份有限公司 | Malicious document detection method, device and system based on attribute domain abnormal calling |
| CN113961919A (en) * | 2020-12-23 | 2022-01-21 | 网神信息技术（北京）股份有限公司 | Malicious software detection method and device |
| CN115982059A (en) * | 2023-03-21 | 2023-04-18 | 麒麟软件有限公司 | Method for implementing Shell script checking tool |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101707601A (en) * | 2009-11-23 | 2010-05-12 | 成都市华为赛门铁克科技有限公司 | Invasion defence detection method and device and gateway equipment |
-
2016
- 2016-12-27 CN CN201611228959.6A patent/CN106845227B/en active Active
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101707601A (en) * | 2009-11-23 | 2010-05-12 | 成都市华为赛门铁克科技有限公司 | Invasion defence detection method and device and gateway equipment |
Non-Patent Citations (1)
| Title |
|---|
| 叶亮: "基于安全规则的源代码分析方法研究", 《CNKI优秀硕士学位论文全文库》 * |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108959925A (en) * | 2018-06-22 | 2018-12-07 | 珠海市君天电子科技有限公司 | A kind of detection method of malicious script, device, electronic equipment and storage medium |
| CN109271315A (en) * | 2018-08-23 | 2019-01-25 | 中国平安财产保险股份有限公司 | Scripted code detection method, device, computer equipment and storage medium |
| CN110765455A (en) * | 2018-09-04 | 2020-02-07 | 哈尔滨安天科技集团股份有限公司 | Malicious document detection method, device and system based on attribute domain abnormal calling |
| CN110086811A (en) * | 2019-04-29 | 2019-08-02 | 深信服科技股份有限公司 | A kind of malicious script detection method and relevant apparatus |
| CN110147671A (en) * | 2019-05-29 | 2019-08-20 | 北京奇安信科技有限公司 | Text string extracting method and device in a kind of program |
| CN113961919A (en) * | 2020-12-23 | 2022-01-21 | 网神信息技术（北京）股份有限公司 | Malicious software detection method and device |
| CN115982059A (en) * | 2023-03-21 | 2023-04-18 | 麒麟软件有限公司 | Method for implementing Shell script checking tool |
| CN115982059B (en) * | 2023-03-21 | 2023-07-04 | 麒麟软件有限公司 | Implementation method of Shell script inspection tool |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106845227B (en) | 2019-09-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106845227A (en) | A kind of malicious script detection method and system based on ragel state machines | |
| CN102682090B (en) | A kind of sensitive word matching treatment system and method based on polymerization word tree | |
| CN101471818B (en) | Detection method and system for malevolence injection script web page | |
| CN102542201B (en) | Detection method and system for malicious codes in web pages | |
| US7797245B2 (en) | Methods and systems for identifying an area of interest in protectable content | |
| CN105956180B (en) | A kind of filtering sensitive words method | |
| CN102955914A (en) | Method and device for detecting security flaws of source files | |
| CN102467633A (en) | Method and system for safely browsing webpage | |
| CN101751530B (en) | Method for detecting loophole aggressive behavior and device | |
| CN104134039B (en) | Checking and killing virus method, client, server and checking and killing virus system | |
| US20190196811A1 (en) | Api specification generation | |
| CN106843840B (en) | Source code version evolution annotation multiplexing method based on similarity analysis | |
| CN102243699A (en) | Malicious code detection method and system | |
| CN112307473A (en) | Malicious JavaScript code detection model based on Bi-LSTM network and attention mechanism | |
| US11263062B2 (en) | API mashup exploration and recommendation | |
| Li et al. | FEPDF: a robust feature extractor for malicious PDF detection | |
| CN103914657A (en) | Malicious program detection method based on function characteristics | |
| CN109033203A (en) | A kind of feature extraction method for parallel processing towards big data | |
| CN103559447A (en) | Detection method, detection device and detection system based on virus sample characteristics | |
| CN101895517B (en) | Method and device for extracting script semantics | |
| CN102141959A (en) | Test case generation method restrained by context-free grammar | |
| CN105740308A (en) | Hypertext markup language structure-based website invisible link detection method and system | |
| CN106650450A (en) | Malicious script heuristic detection method and system based on code fingerprint identification | |
| Jiang et al. | Scalable processing of contemporary semi-structured data on commodity parallel processors-a compilation-based approach | |
| CN103390129A (en) | Method and device for detecting security of uniform resource locator |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address |
Address after: 150028 Building 7, Innovation Plaza, Science and Technology Innovation City, Harbin Hi-tech Industrial Development Zone, Heilongjiang Province (838 Shikun Road) Patentee after: Harbin antiy Technology Group Limited by Share Ltd Address before: 150090 Room 506, No. 162 Hongqi Street, Nangang District, Harbin Development Zone, Heilongjiang Province Patentee before: Harbin Antiy Technology Co., Ltd. |
|
| CP03 | Change of name, title or address | ||
| CP01 | Change in the name or title of a patent holder |
Address after: 150028 building 7, innovation and entrepreneurship square, science and technology innovation city, Harbin high tech Industrial Development Zone, Heilongjiang Province (No. 838, Shikun Road) Patentee after: Antan Technology Group Co.,Ltd. Address before: 150028 building 7, innovation and entrepreneurship square, science and technology innovation city, Harbin high tech Industrial Development Zone, Heilongjiang Province (No. 838, Shikun Road) Patentee before: Harbin Antian Science and Technology Group Co.,Ltd. |
|
| CP01 | Change in the name or title of a patent holder |