基于硬件性能计数器的恶意软件检测技术综述  

A Survey on Malware Detection Technology Based on Hardware Performance Counter

作　　者：户彦飞 文雨[2] 

机构地区：[1]中国科学院大学网络空间安全学院,北京 [2]中国科学院信息工程研究所,北京

出　　处：《计算机科学与应用》2022年第12期2896-2909,共14页Computer Science and Application

摘　　要：随着各种任务交由计算机系统或移动设备处理,大量应用软件走进人们的生活,与之而来的是恶意软件越来越多。对此,主流的恶意软件检测技术弊端凸显,基于硬件性能计数器的恶意软件检测以其独特的优势在安全领域越来越广。据此,本文首先介绍了当前恶意软件的组成及攻防趋势,然后讨论了基于硬件性能计数器的恶意软件检测技术的基本模块,并在此基础上对各项技术中的难点问题进行了阐释,接着梳理了基于硬件性能计数器的恶意软件检测技术的研究现状,最后对其未来发展趋势进行了总结和展望。With all kinds of tasks being handled by computer systems or mobile devices, a large number of applications have entered people’s lives, simultaneously with more and more malware. In this re-gard, the disadvantages of the mainstream malware detection technologies become prominent, and malware detection based on hardware performance counters is becoming more and more popular in the security field with its unique advantages. Therefore, in this paper we first introduce the definition and classification of current attack as well as the defense trend towards current malware, then discuss the basic modules of malware detection technology based on hardware performance counters, with explaining the difficult problems in various technologies, followed by surveying the research status of malware detection technology based on hardware performance counters, and finally summarize and prospect future development.

关 键 词：恶意软件 硬件性能计数器 恶意软件检测 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]