Generally, anti-virus software uses blacklist to isolate threats, while ITSM provides blacklist and whitelist, and more importantly, the gray list sandbox management mechanism for unknown programs can achieve complete control, which can effectively resist malicious extortion programs