Valid

GB/T 47744-2026Cybersecurity technology — Definition and description format for internet malware (English PDF)

网络安全技术　互联网恶意软件定义与描述格式

Preview PDF

This is a limited preview

Buy now to download the full PDF (28 pages)

Need quotation for your management?

Get a formal quotation for GB/T 47744-2026 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

July 2, 2026

Implementation date

February 1, 2027

Scope

GB/T 47744-2026 is the English-translated version of 网络安全技术　互联网恶意软件定义与描述格式.

GB/T 47744-2026 defines internet malware and gives a format for describing it, within the field of cybersecurity technology. It classifies malware, specifies its naming format, and sets out a description format covering source information, basic information, host behaviour and network behaviour.

The classes include viruses, Trojan horses, ransomware and hacking tools, and the standard also deals with operating environment, families, variants, and risk and behaviour.

Appendices give runtime environment codes, risk and behaviour labelling codes and a full example of a notification. It applies to the classification, naming and sharing of malware on mobile internet devices and computer network devices.

Issued on 2 July 2026 and applicable from 1 February 2027, it is a new standard and replaces no earlier edition.

Found what you need?

Document preview — GB/T 47744-2026

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative References
3 Terms and Definitions
4 Abbreviations
5 Internet malware
5.1 General Provisions
5.2 Classification of Internet Malware
5.2.1 Overview
5.2.3 Virus
5.2.4 Trojan Horse
5.2.5 Ransomware
5.2.6 Hacking Tools
5.2.7 Other Internet Malware
5.3 Internet Malware Operating Environment
5.4 Internet Malware Families
5.5 Internet Malware Variants
5.6 Internet Malware Risks and Behaviors
5.7 Internet Malware Reporting Format
5.7.1 Naming Rules for Internet Malware Reports
5.7.2 Classification and Coding of Internet Malware
5.7.3 Internet Malware Risk and Behavioral Tagging Encoding
6 Internet Malware Description Format
6.1 Structure of Internet Malware Description Format
6.2 Source Information
6.3 Basic Information
6.4 Host Behavior Information
6.5 Network Behavior Information
Appendix A (Normative) Internet Malware Runtime Environment Encoding
A.1 Computer Network Equipment
A.2 Mobile Internet Smart Devices
Appendix B (Normative) Internet Malware Risk and Behavior Labeling Code
Appendix C (Informative) Complete Example of Internet Malware Notification Description Format in Malware Reporting Scenarios
References

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents".

1 Scope

This document defines and classifies internet malware, specifies its naming format, and outlines its capture source, behavior, and harm. Description format.

This document applies to the classification, naming, and sharing of malware on mobile internet devices and computer network devices, providing a basis for internet... It provides standardized references for cyber malware security management, security detection, notification, and early warning notification.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies to this document.

GB/T 25069-2022 Terminology for Information Security Technologies

GB/T 40652-2021 Information Security Technology - Guidelines for the Prevention and Handling of Malware Incidents

3 Terms and Definitions

The terms and definitions defined in GB/T 25069-2022 and GB/T 40652-2021, as well as the following terms and definitions, apply to this document.

3.1 Software specifically designed to damage or disrupt

a system, compromise its confidentiality, integrity, and/or availability.

Note: Viruses and Trojans are both types of malware. [Source: GB/T 25069-2022, 3.141]

3.2 Internet malware

Malware that spreads or is distributed via the Internet or other networks, and that is executed locally or remotely over a network (3.1).

3.3 Internet malware sample

The file entities or data mirrors of internet malware are those that can be captured and generated during the spread and operation of internet malware. The specific carrier of the analysis.

Note: Internet malware can be a standalone malware carrier file, a file object infected by internet malware, or a non-file object.

File images that carry malicious code. Internet malware samples are the objects of internet malware detection, analysis, and research.

3.4 Virus

A program that modifies other programs to include a copy of the original program, which may have changed itself, thereby achieving... It spreads its own program, and when the infected program is called, that program is executed.

Note: Viruses often cause some kind of loss or disruption and may be triggered by a certain event (such as a predetermined date).

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 28 pages — is available in the English PDF.

Referenced standards

Normative references

How to Download GB/T 47744-2026

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.