The invention discloses a simulator detection method and
system based on multi-dimensional
feature fusion, and relates to the technical field of simulator detection, and the method comprises the steps: collecting the static feature information of a to-be-detected device; reading a
memory mapping file of the equipment process in a preset time window, and obtaining a
memory address allocation state at each moment to form a
time sequence data set; further constructing an
address space evolution sequence, and performing domain theory modeling to construct an
address space domain; obtaining an address evolution function through a function construction
algorithm; generating a regular mark through a natural transformation detection
algorithm; performing topological
structure analysis and coherence calculation on the
address space category to generate address space complexity features; static feature information, regular marks and address space complexity features are integrated through a multi-layer fusion strategy, and simulator detection results are screened, judged and output layer by layer. According to the method, through a complementary collaborative
system of static
verification, dynamic rules and topology complexity, the anti-avoidance capability and robustness of detection are improved.