Cloud security-based file processing by generating feedback message based on signature information and file features

Abstract

The invention discloses a cloud security-based file processing method and apparatus. The method comprises: generating a signature identifier uniquely corresponding to an unknown program file downloaded locally according to signature related information of the unknown program file; sending a query request to a server end to query whether the unknown program file is a malicious program or not, wherein the query request carries the signature identifier of the unknown program file and a part or all of the file features of the unknown program file; and receiving a feedback message from the server end, and performing subsequent process on the unknown program file according to the feedback message, wherein the server end generates the feedback message according to the signature identifier and the file features. The invention solves the problem of breaking through the cloud killing by utilizing a Trojan in the prior art and at the same time can also reduce the time from discovering a malicious program to killing the malicious program, thereby accelerating the speed of fighting against a new malicious program, reducing the information storage amount of the server as well and in turn guaranteeing the security of a client program.