基于校验和法比较法与夹角余弦公式的变形病毒检测算法

Deformation virus detection algorithm based on checksum value and comparison method

摘要:

基于长度比较法,校验和值以及基于行为的检测算法是三种经典的病毒检测算法,本文将这三种算法相互结合而提出一种新的病毒算法,该算法的思路是：首先通过相应的算法检测某个程序的校验值与该程序的长度是否发生了变化。如果发生了变化,则采用计算机病毒权值计算公式,判断该宿主程序是否被病毒感染了。如果某个程序成为了病毒的宿主,则通过夹角余弦公式对寄生于宿主体内的病毒进行检测,判断该病毒属于那个种类的病毒,从而达到对计算机病毒检测的目的。

Abstract:

Based on the length of the comparison method, the checksum value, and the detection algorithm based on behavior is a classic of three kinds of virus detection algorithm, this paper will these three algorithms together and put forward a new algorithm, the algorithm of the idea is: first, through the corresponding algorithm to detect the length of the calibration value of a program with the program is changed. If there is a change, the computer virus weight calculation formula is used to determine whether the host program is infected by the virus. If a program becomes the host of the virus, the included Angle cosine formula is used to detect the virus in the host and determine which kind of virus the virus belongs to, so as to achieve the purpose of computer virus detection.