Malicious Behavior Describe and Analysis Using Fuzzy Logic

摘要：

With the rapidly popularity of the Internet, the number of malware has rocketing to increase. Many virus analysis techniques suppose that the binary code of a piece of malware is available, which is however not always useful. We propose fuzzy logic-based program behavior describe and analysis method. The behavior of malicious codes is identified by assembly layer and API layer through decompile binary file. For analysis malicious behaviors, we calculate weighted similarity between unknown program and malicious behaviors pattern. The experiment results demonstrate the fuzzy logicbase behavior description and analysis is efficient in detecting unknown malicious actions.

关键词： malicious behavior fuzzy logic similarity

作者: Zhang Yichi Pang Jianmin Guo Haoran

作者单位: National Digital Switching System Engineering & Technology Research Center Zhengzhou, China

会议类型: 国际会议

会议名称: 2011 3rd International Conference on Computer Engineering and Applications(2011第三届计算机工程与应用国际会议 ICCEA2011)

会议地点: 海口

会议语种:英文

页码: 84-88

在线出版日期: 2011-07-15（万方平台首次上网日期，不代表论文的发表时间）