计算机病毒的保守模式分析

计算机病毒对计算机世界造成的威胁与日俱增。尽管各种防毒措施,如防病毒软件和入侵检测系统为人们提供了某些帮助,但它们对付计算机病毒的能力有限,存在着检测效率低、病毒的特征检测标识库经常发生变化等问题。该文针对这些问题,通过对计算机病毒的结构和运行机制的研究,提出了计算机病毒的保守模式的概念,并对这一概念进行了深入的分析,如病毒的搜索模式和自我复制模式等。这些模式的描述为病毒的检测和识别,尤其是新型病毒的有效检测提供了一条新的途径。

Analysis of the Computer Viruses' Conservative Patterns

Computer viruses have shown a previously unknown degree of danger.Although current measures are certainly helpful ,such as anti-viruses software and IDS,their ability for dealing with them is very limited.Their detection efficien-cy is lower,and a signature database update at the end-user machines is needed frequently.Toward these questions,this paper present s the concept of the computer viruses' conservative patterns,and does an in-depth study on them,for ex-ample:searching patterns and self-replication patterns.It can provide a novel way for the computer viruses' detection and recognition,especially for the new ones.