期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

消除病毒变形的零转换技术

Technology named zeroing transformation of eliminating polymorph of virus
在线阅读 下载PDF
导出
摘要 计算机病毒变形技术的出现产生了大量的变形病毒,传统的病毒检测系统在变形病毒检测方面不尽人意。针对该现象,提出了一种消除病毒变形的零转换技术,其中包括消除病毒变形技术常用的垃圾代码的插入、变量重命名、等价语句替换、跳转指令的利用和语句重排等变形转换方法。实验结果表明,该技术能从很大程度上降低病毒变形的个数,程序语句可能出现的平均转换形式个数从转换前的1043降低到108,达到了提高病毒检测系统性能的目的。 The polymorphic technology of computer virus produces a great deal ofpolymorphic virus. There are still some limitations in traditional virus detection systems, such as polymorphic virus detection. Aiming at the phenomenon, a new technology named zeroing transformation is put forward, which includes eliminating the morphing transformations used frequently by the polymorphic technology of computer virus. The morphing transformations comprises dead code insertion, variable renaming, expression reshaping, break and join transformations and statement reordering. The experiment proves that the technology can reduce the amount ofpolymorphs of virus by a long way. The average number of the procedure sentences＇s transformational shape reduces from ten power forty three to ten power eight. The technology improves the performance of virus detection system certainly.
作者 秦晓倩
机构地区 淮阴师范学院地理系
出处 《计算机工程与设计》 CSCD 北大核心 2009年第4期893-896,共4页 Computer Engineering and Design
基金 国家"十五""211工程"重点学科建设基金项目(181070H901) 江苏省科技厅基金项目(2005101SBRB231)
关键词 病毒检测 变形病毒 变形转换 变形转换器 零转换 串表达式 virus detection polymorphic virus polymorph transformation polymorph engine zeroing transformation string representation
分类号 TP309.5 [自动化与计算机技术—计算机系统结构]
  • 相关文献

参考文献7

  • 1Wang Jau-Hwang,Deng P S,Fan Yi-Shen, et al.Virus detection using data mining techinques[C].Proceedings IEEE 37th Annual 2003 International Carnahan Conference on Digital Object Identifier,2003:71-76.
  • 2George Lawton.Virus wars:Fewer attacks,new threats[J].IEEE Computer,2002,35(12):22-24.
  • 3Paul K Harmer, Paul D Williams,Gregg H Gunsch,et al.An artificial immune system architecture for computer security applications[J].IEEE Transtraction on Evolutionary Computation,2002 (6):252-280.
  • 4许丹,李翔,汪小帆.复杂网络理论在互联网病毒传播研究中的应用[J].复杂系统与复杂性科学,2004,1(3):10-26. 被引量：32
  • 5Iyad Kuwatly, Malek Sraj.A dynamic honeypot design for intrusion detection [C]. Proceedings of the IEEE/ACS International Conference on Pervasive Sercices(ICPS'04),2004.
  • 6Grimes R A. Malicious mobile code-virus protection for Windows[M].O'Reilly Media Inc,2004.
  • 7Moinuddin Mohammed. Zeroing in on metamorphic computer viruses[D].University of Louisiana at Lafayette,2003.

二级参考文献35

  • 1[11]Wang Xiaofan, Chen Guanrong. Complex networks: small-world, scale-free, and beyond[J]. IEEE Circuits and Systems Magazine, 2003, 3(2): 6-20.
  • 2[12]Chen Guanrong, Fan Zhengping,Li Xiang. Modelling the complex Internet topology[M]. Complex Dynamics in Communication Networks[M], Springer Publisher, in press, 2004.
  • 3[13]Faloutsos M, Faloutsos P, Faloutsos C. On power-law relationships of the Internet topology[J]. Computer Communication Review, 1999, 29(4): 251-262.
  • 4[14]Li Xiang, Chen Guanrong. A local-world evolving network model[J]. Physica A, 2003, 328(1,2): 274-286.
  • 5[15]Kephart J O, White S R. Directed-graph epidemiological models of computer viruses[A]. Proceedings of the 1991 IEEE Symposium on Security and Privacy[C]. Oakland,California,USA:IEEE Computer Society Press,1991.343-359.
  • 6[16]Kephart J O, White S R. Measuring and modeling computer virus prevalence[A]. Proceedings of the 1993 IEEE Symposium on Security and Privacy[C]. IEEE,1993.2-15.
  • 7[17]Pastor-Satorras R, Vespingnani A. Epidemic spreading in scale-free networks[J]. Physical Review Letters, 2001,86(14): 3200-3203.
  • 8[18]Pastor-Satorras R, Vazquez A ,Vespignani A. Dynamical and correlation properties of the Internet[J]. Physical Review Letters, 2001, 87(25): 258701.
  • 9[19]Moreno1 Y, Pastor-Satorras R, Vespignani1 A. Epidemic outbreaks in complex heterogeneous networks[J]. Eur. Phys. J. B, 2002, 26(4): 521-529.
  • 10[20]Pastor-Satorras R,Vespignani A. Epidemics and immunization in scale-free networks[Z]. Bornholdt S. Handbook of Graphs and Networks: From the Genome to the Internet[M], Wiley-VCH,2003.

共引文献31

计算机工程与设计
2009年 第4期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部