基于层次分析法的加密恶意脚本风险评估模型研究

Research on risk assessment model for malicious encryption script based on AHP

提出了一种基于层次分析法(AHP)的加密恶意脚本检测的评估模型。采用内部静态特征与外部表现特征结合的方法对加密脚本进行检测,再建立基于AHP的评估模型来综合检测和分析加密脚本,评估该加密脚本是否为恶意脚本。实验结果表明,该方法可以有效地检测网页中经过escape加密处理的恶意脚本,准确率较传统检测方法有较大的提高。

This paper proposed a detection model for encryption malicious script based on analytic hierarchy process（AHP）.After matching their external and internal features,the model comprehensively analyzed encryption malicious script by AHP method so as to judge whether they were Web trojans.Experiments show that the method can effectively detect the malicious ＂escape＂ encryption scripts in the Web pages,and the accuracy has greatly improved than traditional methods.