摘要
传统病毒扫描采用特征值扫描技术,虽然这种方法能够非常有效地查知已知的病毒,但是对新病毒完全无能无力。启发式病毒扫描从一定意义上讲就是一种病毒预测技术,它针对病毒的普遍特征(自我复制,破坏系统),对未知病毒进行有效地预测。本文主要针对当前存在的危害极大的宏病毒提出一种简单的启发式宏病毒扫描技术方案。
The traditional method for detecting virus is signature scanning.Although it's very efficient for the known virus,it has no use for the new virus about which we have not known.With the two common characteristics(replication and destroying),the heuristic scanning can detect the unknown virus efficiently.This paper will introduce a detailed method of heuristic scanning for macro virus.
出处
《长春大学学报》
2007年第2期59-62,共4页
Journal of Changchun University
关键词
宏病毒
启发式
虚拟机
macro virus
heuristic
virtual machine
