多态蠕虫特征码自动提取算法  

Automatic Signature Generation Algorithm of Polymorphic Worm

作　　者：陈雪林[1] 

机构地区：[1]绵阳师范学院数学与计算机科学系,绵阳621000

出　　处：《计算机系统应用》2013年第2期142-145,共4页Computer Systems & Applications

摘　　要：针对多态技术下变形蠕虫的特征与自动提取算法的问题,提出一种多态蠕虫特征描述方法,并给出特征码自动提取算法.这种结合了PADS和Polygraph优点的MS-PADS特征提取方法,能在强噪声下快速提取高质量的多态蠕虫特征,具有低误报率、检测精度高和通用性好等特点.This paper researches the feature description and automatic signature generation algorithm of polymorphic worms. It proposes a new signature generation approach for polymorphic worms - MS-PADS （multiple separated string position-aware distribution signature）, which integrate the advantage of PADS and Polygraph. It solved the problem of PADS signature width determination under strong background noise conditions. This method could generate high quality signatures of polymorphic worms with low false-positive rate and high detection precision rate.

关 键 词：多态蠕虫 特征提取 内容过滤 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]