基于序列关联的病毒感染行为模式

Behavior pattern of virus infection based on sequence association

大型企业的计算机终端数量往往成千上万,积累了海量病毒感染日志数据,这些数据隐藏的模式并没有被充分挖掘和利用。利用序列关联算法对病毒感染数据进行挖掘,发现有趣的序列关联规则,这些规则反映了计算机终端病毒感染行为模式。基于序列关联规则,提出有效解决措施和一种信息安全管理机制,以降低计算机终端感染病毒的概率。

The number of computer terminals in large enterprises is often tens of thousands,and accumulated a large amount of virus infection log data; the hidden patterns of these data have not been fully excavated and utilized. The sequence association algorithm is used to mine the data of virus infection,and find the interesting sequence association rules. These rules reflect the pattern of computer terminal virus infection. Based on the sequence association rules,an effective solution and an information security management mechanism are put forward to reduce the probability that the computer terminal infected the virus.