文章基本信息

标题：A Method for Efficient Malicious Code Detection Based on Feature Codes
本地全文：下载
作者：Wenshuang Yin ; Changcheng Xiang ; Dingding Yang 等
期刊名称：Journal of Software
印刷版ISSN：1796-217X
出版年度：2016
卷号：11
期号：9
页码：952-959
DOI：10.17706/jsw.11.9.952-959
出版社：Academy Publisher
摘要：The malicious code detection can be implemented by the characteristics of the file. Based on the variant feature codes, a method of malicious code detection is proposed in this paper. A file signature library can be set up by using the feature codes of the original data segments, file Message-Digest Algorithm 5 (MD5) features and the types of files. Both match algorithm and extended Aho-Corasick (AC) are employed to identify the signature of wildcard and location information. It can be effectively demonstrated by experimental results that compared with traditional AC algorithm, the accuracy of algorithm is increased by 15.95% and the rate of false positive is reduced by 8.87%. Furthermore, the algorithm proposed in this paper also can identify the features of malicious code variants.
其他关键词：Pattern matching algorithm, characteristics of the file, malicious code detection, extended AC algorithm.