基于威胁情报技术的软件恶意行为分析模型

Analysis Model of Software Malicious Behavior Based on Threat Intelligence Technology

随着互联网的开放性和复杂性不断提高,企业信息系统面临着更大规模的软件恶意行为的入侵与破坏,对系统的正常运行造成了严重的影响。因此,针对软件行为进行快速可靠的定性分析,并及时采取有效措施予以解决成为了网络安全领域研究的热点。论文以威胁情报技术为依托,采取静态的聚类算法与动态的SVM机制相结合的方法,建立了针对软件恶意行为的分析模型,并设计了相关的算法流程,具有一定的应用推广价值。

With the increasing openness and complexity of the Internet,enterprise information systems are also facing a larger scale of invasion and destruction by software maliciously behavior,which has led to a serious impact on the normal operation of the system. Therefore,rapid and reliable qualitative analysis of software behavior and taking effective measures to solve the problem in time has become a hot research topic in the field of network security. Based on threat intelligence technology,this paper combines static clustering algorithm with dynamic SVM mechanism,establishes an analysis model for software malicious behavior,and designs the related algorithm flow,which has certain application and popularization value.