CAJ | 학술논문

受免疫原理在入侵检测系统中成功应用的启发,提出了一种基于免疫的检测未知病毒的通用检测技术.由于病毒需要重定位模块来访问自己的资源,而这在正常程序中不常见,故可利用重定位模块来生成检测未知病毒的检测器.分析了计算机病毒的逻辑结构,建立了自体和非自体的演化方程、抗原提呈及抗体生成方法.实验表明,该技术不仅可检测已知病毒,还能有效检测未知病毒,且有自适应和自学习能力.
수면역원리재입침검측계통중성공응용적계발,제출료일충기우면역적검측미지병독적통용검측기술.유우병독수요중정위모괴래방문자기적자원,이저재정상정서중불상견,고가이용중정위모괴래생성검측미지병독적검측기.분석료계산궤병독적라집결구,건립료자체화비자체적연화방정、항원제정급항체생성방법.실험표명,해기술불부가검측이지병독,환능유효검측미지병독,차유자괄응화자학습능력.
A novel Windows PE virus detection approach is presented that draws inspiration from artificial immune system and the structure of the relocation module of the virus. The structure of Windows PE virus is sufficiently an-alyzed. The dynamic evolution of self and nonself, the presentation of the antigen, and the generation of the anti-body are proposed. The experiment is conducted and its results indicate that this approach not only has relatively higher detection rate of unknown Windows PE virus than the earlier known methods, but also has better capability of self-adaptive and self-learning.