摘要
介绍了病毒主动式防御技术、已知病毒的变形检测技术以及改进的K-近邻算法的病毒主动式防御技术,并分析了它们的不足。提出了一种基于核的K-近邻算法与主动式防御技术相结合的解决方案,此方案既可高效地判断安全进程,又可较为准确地检测出未知病毒。
the detection technology of known variants of virus and the active defence technology against virus based on K-NN are introduced in this paper. Their disadvantages are analyzed. A method which is based on k-nearest neighbor algorithm of kernel and the active defence technology against virus is proposed. The method can distinguish safe process from the unknown viruses process efficiently, and can detect unknown viruses more accurately.
出处
《计算机安全》
2009年第7期55-57,共3页
Network & Computer Security
关键词
病毒
主动防御
核函数
K-最近邻算法
Virus
Active Defence
Kernel Function
K-Nearest Neighbor Algorithm
