欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
任何可执行文件都必须满足一定的结构特征.本文以Windows平台下的PE文件为研究对象,从PE头、节头、节代码出发,给出了17个结构特征;针对给定正常软件和各类恶意软件,获得了这些属性取值分布特征;采用多类数据挖掘分类技术获得了正常软件与恶意软件的判定规则.实验结果表明,C5.0的分类算法检测准确性最好,达到94.16%.这些规则可以为软件可信性度量提供依据.
英文摘要：
Every executive binary has a well-defined structure.On the basis of PE under Windows,seventeen structural features are given;values ranges are gained from different kinds of software： benign software and kinds of malware.And then the detection rules between benign software and malware are discovered by using several kinds of mining algorithm,among of which the C5.0 algorithm has the best accuracy,which is 94.16%.Also,this detection rules can be used to measure the trust of software.
同期刊论文项目
同项目期刊论文
位置：