摘要
计算机病毒给世界经济带来巨大威胁和损失,而病毒库的更新具有滞后性。利用计算机病毒文件的行为特征和MD5算法来产生病毒文件MD5值,并以它作为病毒检测特征码。信息管理人员自己根据这些特征码来定义病毒,生成各种病毒专杀工具,来解决现杀毒软件病毒库更新在时间具有滞后性问题,使病毒处理的效率达到即时性。
Being a great menace, computer virus may bring great loss to world economy, while the update of the virus library is far more behind the development of viruses. So in this paper we generate the MD5 value of virus files by referring to the behaviour characteristics of computer virus files and using MD5 algorithm, and then use it as the feature codes for virus detecting. Then, information administrators could use these feature codes to define virus and develop different kinds of virus-specific killing tools. Consequently, the problem of virus library update being delayed can be solved, and viruses can be killed immediately.
出处
《计算机应用与软件》
CSCD
北大核心
2013年第1期117-119,234,共4页
Computer Applications and Software
基金
天津市自然科学基金项目(08JCYBJ03500)
天津科技大学校基金项目(20080222)
关键词
病毒库
滞后
特征码
专杀工具
Virus library Delay Feature code Virus-specific killing tool
