Patent ID: 9203804
Filing Date: 2015-12-01
Classification: H04L

Abstract:
1. A malware defending method, comprising: receiving a network packet by an electronic device, wherein the electronic device stores a filtering table; determining whether the network packet conforms to at least one specific filtering rule in the filtering table by the electronic device; executing a specific operation on the network packet according to the at least one specific filtering rule by the electronic device if the network packet conforms to the at least one specific filtering rule in the filtering table; uploading characteristic information of the network packet to a malware analyzing device by the electronic device if the network packet does not conform to the at least one specific filtering rule in the filtering table; and determining whether the network packet contains malware according to the characteristic information of the network packet by the malware analyzing device, wherein the step of determining whether the network packet contains the malware according to the characteristic information of the network packet by the malware analyzing device comprises: