四川师范大学学报(自然科学版)2011,Vol.34Issue(1):123-127,5.DOI:10.3969/j.issn.1001-8395.2011.01.024
基于行为特征库的木马检测模型设计
Design of Trojan Horse Detection Model Based on the Behavioral Library
摘要
Abstract
At present, the mainstream technology of Trojan horse detection is the characteristic code detection technology, but this technology lags behind extracting characteristic code, it can not detect the new Trojans.In order to detect the new Trojans better, by summing up the Trojan behavioral characteristics in detail, and constructing the library of Trojan behavioral characteristics, the Trojan detection model which based on the behavioral library has been designed.It can judge Trojan making use of fuzzy pattern recognition.Experiments prove that this model can analyze and judge the behavior of suspicious program, identify the Trojan.This detection technolgy has great value in practical application.关键词
木马/行为特征/模糊模式识别Key words
trojan horse/ behavioral characteristics/ fuzzy pattern recognition分类
信息技术与安全科学引用本文复制引用
李焕洲,陈婧婧,钟明全,唐彰国..基于行为特征库的木马检测模型设计[J].四川师范大学学报(自然科学版),2011,34(1):123-127,5.基金项目
四川省应用基础研究项目(07JY029-011)和四川省教育厅自然科学重点基金(08ZA043)资助项目 (07JY029-011)