The search functionality is under construction.
The search functionality is under construction.

The Unknown Computer Viruses Detection Based on Similarity

Zhongda LIU, Naoshi NAKAYA, Yuuji KOUI

  • Full Text Views

    0

  • Cite this

Summary :

New computer viruses are continually being generated and they cause damage all over the world. In general, current anti-virus software detects viruses by matching a pattern based on the signature; thus, unknown viruses without any signature cannot be detected. Although there are some static analysis technologies that do not depend on signatures, virus writers often use code obfuscation techniques, which make it difficult to execute a code analysis. As is generally known, unknown viruses and known viruses share a common feature. In this paper we propose a new static analysis technology that can circumvent code obfuscation to extract the common feature and detect unknown viruses based on similarity. The results of evaluation experiments demonstrated that this technique is able to detect unknown viruses without false positives.

Publication
IEICE TRANSACTIONS on Fundamentals Vol.E92-A No.1 pp.190-196
Publication Date
2009/01/01
Publicized
Online ISSN
1745-1337
DOI
10.1587/transfun.E92.A.190
Type of Manuscript
Special Section PAPER (Special Section on Cryptography and Information Security)
Category
Application

Authors

Keyword