1. A method for programidentification based on machine learning, characterized by comprising: analyzing an inputted unknown program, and extracting a feature of the unknown program; coarsely classifying the unknown program according to the extracted feature; judging, by inputting the unknown program into a corresponding decision-making machine generated by training, according to a result of the coarse classification; and outputting an identification result of the unknown program, wherein the identification result is a malicious program or a non-malicious program.