Method and apparatus for monitoring security of terminal system
AssigneeTencent Technology (Shenzhen) Company Limited
InventorZixiao Nie
Life of this patent
Estimating the term…
Abstract
Disclosed is a method for monitoring security of a terminal system, including the following steps: monitoring a current running program in real time, and determining whether there is a security risk in the current running program; acquiring a corresponding preset risk score according to a type of the security risk, and adding the corresponding preset risk score to an accumulative risk score when there is the security risk in the current running program; and performing a risk prompt and a static scanning prompt when the accumulative risk score is greater than or equal to a risk threshold.
Claims12
A method for monitoring security of a terminal system, comprising:
- monitoring a current running program in real time;
- determining whether there is a malicious event in the current running program;
- in response to determining that the malicious event is in the current running program, determining whether security scanning and virus scanning and killing is being performed;
- in response to determining that the security scanning and the virus scanning and killing is being performed, directly adding the current running program to a risk list of the security scanning and virus scanning and killing, wherein the risk list includes all programs on which the security scanning and virus scanning and killing is performed;
- and
- in response to determining that the security scanning and the virus scanning and killing is not being performed:
- acquiring a preset risk score corresponding to a type of the malicious event when there is the malicious event in the current running program;
- updating an accumulative risk score by adding the preset risk score to the accumulative risk score;
- and
- performing a risk prompt and a static scanning prompt when the accumulative risk score is greater than or equal to a risk threshold.
An apparatus for monitoring security of a terminal system, comprising one or more processors and a non-transitory computer readable medium having a plurality of computer readable instructions stored thereon that, when executed by the one or more processors, cause the one or more processors to:
- monitor a current running program in real time;
- determine whether there is a malicious event in the current running program;
- in response to determining that the malicious event is in the current running program, determine whether security scanning and virus scanning and killing is being performed;
- in response to determining that the security scanning and virus scanning and killing is being performed, directly add the current running program to a risk list of the security scanning and virus scanning and killing, wherein the risk list comprises all programs on which the security scanning and virus scanning and killing is performed;
- and
- in response to determining that the security scanning and virus scanning and killing is not being performed:
- acquire a preset risk score corresponding to a type of the malicious event when there is the malicious event in the current running program;
- update an accumulative risk score by adding the preset risk score to the accumulative risk score;
- and
- perform a risk prompt and a static scanning prompt when the accumulative risk score is greater than or equal to a risk threshold.
A non-transitory computer readable storage medium storing computer executable instructions that, when executed by a processor, the computer executable instructions perform a method for monitoring security of a terminal system, the method for monitoring security of a terminal system comprising:
- monitoring a current running program in real time;
- determining whether there is a malicious event in the current running program;
- in response to determining that the malicious event is in the current running program, determining whether security scanning and virus scanning and killing is being performed;
- in response to determining that the security scanning and virus scanning and killing is being performed, directly adding the current running program to a risk list of the security scanning and virus scanning and killing, wherein the risk list comprises all programs on which the security scanning and virus scanning and killing is performed;
- and
- in response to determining that the security scanning and virus scanning and killing is not being performed:
- acquiring a preset risk score corresponding to a type of the malicious event when there is the malicious event in the current running program;
- updating an accumulative risk score by adding the preset risk score to the accumulative risk score;
- and
- performing a risk prompt and a static scanning prompt when the accumulative risk score is greater than or equal to a risk threshold.
Dependencies are inferred from the claim text.