基于异常检测的邮件病毒防治方案  

Protected scheme for email virus based on abnormal detection

作　　者：邓清华[1] 金聪[1] 刘俊[1] 

机构地区：[1]华中师范大学计算机科学系,湖北武汉430079

出　　处：《计算机工程与设计》2009年第19期4390-4392,共3页Computer Engineering and Design

基　　金：湖北省自然科学基金项目(2008CDB349)

摘　　要：为了控制病毒的传播,给出了一种新颖的基于异常检测的邮件病毒防治方案。通过分析病毒邮件的异常行为,并给出用户相应的风险提示来达到阻止病毒进一步传播的目的。该策略能够检测出层出不穷的新病毒和已有病毒的变种,符合了当前反病毒技术的发展要求。For the sake of controlling the virus spreading, a novel protected scheme for viral emails is proposed which detected viruses based on the abnormal behaviors rather than the pattern of viruses. This scheme stops the further propagation ofemail virus by analyzing the abnormal behaviors and giving users hints about email virus. It can detect the new viruses and variations without the pattern, which accord with the developing requirements of anti-virus technologies.

关 键 词：邮件病毒 异常检测 风险系数 反病毒技术 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]