病毒在计算机运行之后将根据自身的目的呈现出一系列的动作，包括写注册表项，生成文件，远程线程注入等等。本系统通过拦截系统调用对程序行为进行监控，将监控的行为信息交给监控中心和网络服务器分析处理，根据程序行为分析判断病毒，云安全概念的加入，本地特征库极小，占用系统资源很少。本系统设想根据这一系列的动作所组成的行为进行智能的逻辑判断该程序是不是病毒。-Will be followed by the virus in the computer is running according to their own purposes Chengxian a series of actions, Baokuo write registry Xiang, Shengchengwenjian, Yuan Cheng thread into the Deng Deng. This system by intercepting system calls to monitor the program behavior, the behavior of the control information to the monitoring center and network server analysis and processing, according to analysis of program behavior to judge the virus, adding the concept of cloud security, local feature library is very small system resources are less. The system envisaged under the action of this series of acts consisting of intelligent logic determines that the program is not a virus.