Method for defending unknown virus program
A virus program and unknown virus technology, applied in the field of defense against unknown virus programs, can solve the problems of increasing system burden, increasing the difficulty of virus identification, increasing the failure of virus body decryption, etc., achieving the goal of improving the recognition rate and eliminating the misjudgment rate Effect
Inactive Publication Date: 2008-10-08
光子(北京)国际信息工程技术研究有限公司
View PDF2 Cites 34 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
In reality, some people also propose to decrypt the virus bodies that have been encrypted, deformed, etc., using the packing technology first, and restore the virus body to the original state, that is, the state before the virus body adopts the packing technology. It is difficult to identify the virus, and many events of failure to decrypt the virus body have been added, and the additional burden on the system has been increased
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
example 1
example 2
example 3
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a method for defending unknown virus programs, comprising: obtaining the running feature data of a program to be detected; and judging whether the program is a virus program according to the running feature data or running feature data set of the program to be tested, and the virus running feature data or virus running feature data set of a preset virus program. According to the invention, unknown viruses can be recognized by using the behavior data and the running feature data of programs to be detected.
Description
How to defend against unknown virus programs technical field The invention relates to a method for defending against unknown virus programs, in particular to a method for defending against unknown virus programs. Background technique With the development of computer application technology, the development of viruses is also accelerating, and the original signature technology has been unable to deal with the current popular computer viruses alone. In the past two years, the technology of judging whether a program is a virus based on program behavior has also been widely used. The principle of this technology is to first detect the behavior of the monitored program, and then judge whether the monitored program is a virus based on the comparison between the behavior of this program and the stored in the preset harmful behavior database of the program. For example, the Chinese invention patent with application number 200510007682.X discloses a computer protection method base...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More IPC IPC(8): G06F21/00G06F21/56
Inventor 白杰
Owner 光子(北京)国际信息工程技术研究有限公司