关键词: 信息安全,恶意代码,现场处置,阈值分析,快速处置

Abstract: Nowadays,malicious code has many characteristics,such as multiple types,harm,high complex and needing fast response to handle it.Because the existing method for the analysis of malicious code is difficult to adapt to rapidly analyzing and disposing at the scene and the needs of application practice,this paper proposed the analysis method of malicious code based on feature threshold and constructed the details of the rapid analysis and disposal of malicious code.It contains the environmental analysis,file refinement,static analysis and dynamic analysis.By constructing the threshold determination,locating the function and family properties of code,we provided the specific method of removing the malicious code.The result of practical application proves that this method combines intention,function,structure and behavior of malicious code,and realizes the research about the analysis of the security of malicious code at the level of the disposal site.It provides important support for the fast response and disposal of the current network security of malicious code.

Key words: Information security,Malicious code,Site disposal,Threshold analysis,Rapid disposal