基于异常检测的邮件病毒防治方案

Protected scheme for email virus based on abnormal detection

为了控制病毒的传播,给出了一种新颖的基于异常检测的邮件病毒防治方案。通过分析病毒邮件的异常行为,并给出用户相应的风险提示来达到阻止病毒进一步传播的目的。该策略能够检测出层出不穷的新病毒和已有病毒的变种,符合了当前反病毒技术的发展要求。

For the sake of controlling the virus spreading, a novel protected scheme for viral emails is proposed which detected viruses based on the abnormal behaviors rather than the pattern of viruses. This scheme stops the further propagation ofemail virus by analyzing the abnormal behaviors and giving users hints about email virus. It can detect the new viruses and variations without the pattern, which accord with the developing requirements of anti-virus technologies.