METHOD AND SYSTEM FOR PREVENTING MALICIOUS CODE DURING MAINTENANCE PROCESSES

This invention provides a method and system for preventing malicious code during maintenance processes. The method includes: obtaining access and identity execution data for the target device's maintenance process and conducting a first detection based on this execution data; simulating the maintenance based on the device's maintenance methods and procedures to determine the predicted addresses and execution commands of malicious code during the simulated maintenance process; acquiring the addresses and execution commands of malicious code from the target device's historical maintenance processes, and combining these with the predicted addresses and execution commands to forecast the malicious code records of the target device; constructing a malicious code behavior graph based on the malicious code records and the results of the first detection, thereby analyzing the malicious code in the current maintenance process and implementing prevention based on the analysis results. By detecting data from the maintenance process and integrating it with simulation predictions, a more accurate malicious code behavior graph is obtained, enhancing the comprehensiveness and precision of the malicious code analysis, thereby enabling more precise and timely prevention of malicious code.