基于虚拟机的启发式扫描反病毒技术  

HEURISTIC SKILL OF COMPUTER VIRUS ANALYSIS BASED ON VIRTUAL MACHINE

作　　者：曾宪伟[1] 张智军[1] 张志[1] 

机构地区：[1]空军工程大学工程学院,陕西西安710038

出　　处：《计算机应用与软件》2005年第9期125-126,共2页Computer Applications and Software

摘　　要：在进行深入分析病毒和正常程序的区别基础上,提出对病毒进行启发扫描分析的观点,并基于虚拟机技术进行了实现。改进手动病毒分析的传统方式,深层理解病毒运行机制,方便了防毒软件的编写,同时对未知病毒的防治也具有深远的意义。A new antivirus theory is presented in this paper. Based on distinguishing between virus and normal programs, the system puts forward a heuristic skill of computer virus analysis and realizes based on virtual machine. It improves the conventional manual methods. Through this way we learn deeply how virus working,it is helpful for designing of antivirus Software, also do well in detecting unknown viruses.

关 键 词：虚拟机 病毒 启发扫描 指令模拟 反病毒技术 虚拟机技术 启发式扫描 扫描分析 病毒分析 防毒软件 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构] TP311.56[自动化与计算机技术—计算机科学与技术]