恶意代码的RGB图像化方法研究  

Research on RGB Image Method of Malicious Code

作　　者：李倩芸 高丽婷[1] 刘明珠 LI Qianyun;GAO Liting;LIU Mingzhu(Hebei University of Architecture,Zhangjiakou,Hebei 075000)

机构地区：[1]河北建筑工程学院,河北张家口075000

出　　处：《河北建筑工程学院学报》2023年第1期226-231,共6页Journal of Hebei Institute of Architecture and Civil Engineering

摘　　要：近些年,恶意代码攻击事件频现,准确识别出恶意代码的类型能够有效地对恶意代码进行精准防控,然而传统的恶意代码分类方法通常是将恶意代码文件直接转化为灰度图像,或是将恶意代码文件经过处理后转换为灰度图像,而灰度图像作为单通道图像蕴含的信息少,已经无法满足不断改进的恶意代码的辨识要求。针对这一问题,提出了一种将恶意代码转换为RGB图像的方法,该方法能够在恶意代码图像中融入更多的特征,能够适应不断增加的新型变种的恶意代码分类的预处理要求。In recent years,malicious code attacks have occurred frequently.Accurately identifying the type of malicious code can effectively prevent and control malicious code.However,traditional malicious code classification methods usually convert malicious code files directly into grayscale images,or convert the malicious code file into a grayscale image after processing,and the grayscale image as a single-channel image contains little information,which can no longer meet the identification requirements of the continuously improved malicious code.In response to this problem,a method is proposed to convert malicious code into RGB images,which can incorporate more features into malicious code images,and adapt to the preprocessing requirements of malicious code classification for the increasing number of new variants.

关 键 词：恶意代码 PE文件 RGB图像 

分 类 号：TP389.1[自动化与计算机技术—计算机系统结构]