摘要
病毒的出现已有四十年左右,在这四十几年中,病毒经过了数代发展和技术更新,如今的病毒已发展为第四代病毒。但不论病毒技术如何发展,如果某个程序是病毒,那么这个程序就具有病毒应有的属性,病毒的传染模块是区别于其他恶意程序的重要属性。因此,将从未知程序属性的角度,提取其属性并将其属性与病毒传染模块属性进行比较。如果未知程序某些属性值接近病毒传染模块的属性值,那么就在此基础上再使用病毒感染实验法,进一步判定该未知程序是不是病毒。
now has a virus, malicious attribute infection the virus has been around forty years, in the forty years developed into the fourth generation of virus virus. But no then the program has properties due to infectious virus, the virus updated several generations matter how the virus technology virus is an important attribute of development and technology development, if a program is of different modules and other programs. This paper, from unknown programs attribute angle, extracting the attribute and the attribute and the virus module comparison experiment f an unknown program some attribute values near the virus module value, then again on this foundation using virus method, one step closer to determine whether the unknown programs Is it right？ Virus.
出处
《计算机安全》
2014年第4期14-17,共4页
Network & Computer Security
基金
北京航空航天大学软件开发环境国家重点实验室开放基金资助项目(SKLSDE-2013KF)
关键词
病毒
属性
神经网络
智能算法
实体
virus
attribute
neural network
intelligent algorithm
entity.
