Abstract: Disclosed is a storing method for data acquisition, including: acquiring a collected data, and acquiring a generation time and a collection time for the collected data; obtaining an offset by computing a difference between the generation time and the collection time; and acquiring a default offset threshold, and determining whether the offset being less than the default offset threshold; if so, acquiring a centralized storage directory corresponding to the collected data, acquiring a generation time sub-directory corresponding to the generation time under the centralized storage directory, acquiring an offset sub-directory corresponding to the offset under the generation time sub-directory and storing the collected data in the offset sub-directory. The invention also provides a storing apparatus for data acquisition. The storing method and apparatus for data acquisition improve the data access efficiency.

Abstract: Computer-implemented methods and systems for creating or updating approved-file and trusted-domain databases and verifying the legitimacy of files are disclosed. A method for creating or updating an approved-file database may include intercepting a first file, identifying a source domain associated with the first file, identifying a trusted-domain database, determining whether a database record for the source domain associated with the first file exists within the trusted-domain database, creating a hash value for the first file if a database record for the source domain associated with the first file exists within the trusted-domain database, and storing the hash value for the first file in an approved-file database. Methods and systems for verifying the legitimacy of a file and for creating or updating a trusted-domain database are also disclosed.