基于支持向量机的病毒程序检测方法

Research of Malicious Executables Detection Method Based on Support Vector Machine

支持向量机是一种对于小样本具有良好学习性能的机器学习方法 .本文将支持向量机方法用于病毒程序的检测中 ,可以改善其它方法在先验知识较少情况下的推广能力的问题 .仿真实验结果看出 ,该方法在训练样本数相对较少的情况下 ,仍然具有较高的检测率和正确率 ,同时也具有较低的虚警率 .

Support vector machine is a machine study method with good performance when the sample size is small. The method of support vector machine is used to malicious executable in the paper that improves the generalizing ability with given less prior knowledge. Then simulation results express this method has better detection rate, overall accuracy and false positive rate reduced with less training sample size.