基于语义特征的恶意代码检测综述

Survey on Malware Detection Based on Semantic Features

通过对基于不同语义特征的恶意代码检测技术进行梳理归纳,厘清不同语义特征在恶意代码检测过程中的作用,为恶意代码检测技术路线、判定算法的选择奠定了基础。

Malware is one of the major threats to network security. The signature detection technolo- gy based on syntactic teatures could hardly adapt to the rapid evolution of malware. The detection technology based on semantic teatures has become the mainstream of malware analysis. According to the ditterent objects, the semantic teatures include assembly instruction, flow graph, system call, and comprehensive teatures. Among them, different objects can be organized in different ways. Through the analysis of malware detection technology based on different semantic teatures, it can clarify the role of ditterent semantic teatures in malware detection, and lay a good toundation for the selection of malware detection technology route and detection model.