基于有效隔离的专用网络脚本病毒仿真研究  

Simulation of Private Network Script Virus Based on Effective Isolation

作　　者：沈根海[1] SHEN Genhai(Jiaxing Nanyang Vocational and Technical College,Jiaxing Zhejiang 314031)

机构地区：[1]嘉兴南洋职业技术学院,浙江嘉兴314031

出　　处：《软件》2022年第2期67-69,共3页Software

摘　　要：为进一步提高专用网络脚本病毒检测结果的精确性和真实性,实现对脚本病毒的有效隔离,现基于主动学习法,提出一套切实可行的专用网络脚本病毒隔离方法。首先,专用网络脚本病毒文件通常含有静态特征,通过对其静态特征进行全面分析和提取,并对敏感API函数进行有效调用,然后,将相关恶意特征行为设置为划分标准,实现对API函数的科学分类。同时,还要利用判别熵最小化特征提取相关知识,简化脚本病毒所对应的特征项,以实现对未标签脚本病毒的智能化、高效化隔离。仿真结果表明:本文所提出的病毒隔离方法,可以有目的、有针对性地隔离脚本病毒,完全符合实际应用需求。希望通过这次研究,为相关人员提供有效的借鉴和参考。In order to further improve the accuracy and authenticity of the special network script virus detection results,and realize the effective isolation of script virus,a set of feasible private network script virus isolation method is proposed based on active learning method.Firstly,the special network script virus file usually contains static features.Through the comprehensive analysis and extraction of its static features,and the effective call of sensitive API functions,then the relevant malicious feature behavior is set as the division standard to realize the scientific classification of API functions.At the same time,we also use the discriminant entropy to minimize the feature extraction related knowledge and simplify the feature items corresponding to the script virus,so as to realize the intelligent and efficient isolation of the unlabeled script virus.The simulation results show that the virus isolation method proposed in this paper can isolate script viruses purposefully and pertinently,which fully meets the needs of practical application.It is hoped that this study can provide effective reference for relevant personnel.

关 键 词：有效隔离 专用网络脚本 病毒 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]