反病毒软件防护EANSS模型的设计与实现  

The Design and Implementation of EANSS Model for Antivirus Software Protection

作　　者：刘鑫 宋显华 吴世鹏 李增光 张欢 王凯 

机构地区：[1]哈尔滨理工大学现代教育技术中心,黑龙江哈尔滨150080 [2]哈尔滨理工大学应用科学学院,黑龙江哈尔滨150080

出　　处：《哈尔滨理工大学学报》2017年第6期72-75,共4页Journal of Harbin University of Science and Technology

基　　金：国家自然科学基金(61501148)

摘　　要：针对ANSS(ANtivirus software shield)模型的不足,扩展了ANSS模型提出了EANSS(enhanced ANtivirus software shield)模型,将新的攻击规则融入到新的模型中,并且在EANSS模型中加入了实时监控机制、自学习机制来提高保护的能力。实验结果表明:EANSS模型不影响系统的正常运行,可以对反病毒软件进行更好的保护,同时占用较低的系统内存和CPU占用率。Aiming at ANSS( ANtivirus Software Shield) model disadvantages,this paper extends ANSS model and proposes a new model named EANSS( Enhanced ANtivirus Software Shield). There are some new rules of the attack are added into the new model,and the real-time monitoring mechanism and the self learning mechanism also be joined in the ENASS model to improve the ability of protection. Experiment results show that the EANSS model not only don' t influences the operations of normal applications but also can protect antivirus software from being terminated by them with low CPU performance overhead and memory write performance overhead.

关 键 词：杀毒软件 ANTIVIRUS Software Shield模型 恶意软件 Application PROGRAMMING 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]