程序属性的检测与程序属性的分类

The detection of program attributes and the classification of program attributes

摘要:

摘要：在当今的各种程序中，很多人认为只存在两种程序，即善意程序和恶意程序，但对程序属性研究之后，发现还存在第三种属性的程序，该程序部分具有恶意性，部分具有善意性，第三种属性程序是由本文首次提出。本文提出解决问题的思路是：首先采用恶意权值计算公式对程序进行计算，判断该程序是善意程序还是恶意程序，并且分析了程序的权值是否发生了变化。如果是某个程序的权值发生了变化，那么此时善意程序被病毒感染的可能性很大，被病毒感染的程序在一定时候就能够体现出一定的恶意性，因此经过对病毒、被病毒感染的程序和善意程序三种不同属性程序分析之后，最后使用MMTD算法对三种属性的程序进行了分类：该程序是恶意程序，善意程序还是部分恶意部分善意的程序。

Abstract:

In today's various programs, many people think that there are only two procedures, namely, goodwill and malicious programs, but after the study of the program attributes, found that there is a third attribute of the program, the program part of a malicious, Part of the good intentions, the third attribute program is first proposed by this article. This paper puts forward the idea of solving the problem: firstly, the malicious weight calculation formula is used to calculate the program, judge whether the program is a good program or a malicious program, and analyze whether the weight of the program has changed. If the weight of a program has changed, then the bona fide program is very likely to be infected by the virus, the virus infection program at a certain time will be able to reflect a certain degree of malicious, so after the virus, the virus Infection procedures and goodwill procedures after the analysis of three different attributes, the final use of MMTD algorithm for the three types of procedures were classified: the program is malicious programs, goodwill or part of the malicious part of the program in good faith.