Baidu Online Network Technology (beijing) Co., Ltd.

Baidu Online Network Technology Co., Ltd.

Huaming Yue

Yinming Mei

Hanzhong Hu

Tingli Bi

Yizhi Xie

A method, apparatus and system for detecting a malicious process behavior. A detection apparatus monitors a process to obtain behavior information about a target process behavior, and then sends the behavior information to a server, which determines whether the target process behavior is a malicious process behavior. The detection apparatus can receive first operation indication information returned by the server according to a detection result of the target process behavior, and perform an operation on the target process behavior according to the first operation indication information. The target process behavior is subjected to a comprehensive detection by the server according to the behavior information, rather than depending on a specified feature analysis of a single sample of the target process behavior by the detection apparatus, so that malicious process behavior can be detected in time, thereby improving the security performance of the system.

Growing community of inventors

Beijing, China

Huaming Yue