计算机应用研究Issue(11)：3439-3442,4.DOI:10.3969/j.issn.1001-3695.2015.11.056
基于敏感点覆盖的恶意代码检测方法
Malware detection method based on covering sensitive points
摘要
Abstract
In order to improve the detection efficiency and accuracy of the malicious code and the variant,this paper proposed a malicious code detection method based on covering sensitive points,using the dynamic and static analysis technology.First-ly,it used the static analysis technology to identify those sensitive points and sensitive paths that contained malicious or sensi-tive behaviors.Then it executed and analyzed these sensitive paths using the dynamic symbolic execution technology,and ex-tracted the feature of the system call graph which could express the behavior semantic of malicious codes.Finally,it detected and identified the family of the object code by matching the feature graph.The experiment shows that this method can improve the analysis efficiency and recognition rate of malicious codes and their variants.关键词
恶意代码检测/敏感行为函数/系统函数调用图/敏感路径/符号执行Key words
malware detection/sensitive behavior function/system call graph/sensitive path/symbolic execution分类
信息技术与安全科学引用本文复制引用
秦艳锋,王清贤,曾勇军,奚琪..基于敏感点覆盖的恶意代码检测方法[J].计算机应用研究,2015,(11):3439-3442,4.基金项目
国家“863”计划资助项目 （）
