面向蠕虫自动特征产生系统的设计与实现

计算机以及网络的的迅速发展在带给人类方便的同时，也为恶意代码的传播提供了良好的条件。一种具有传播速度快，破坏力大和高智能性等特点的恶意代码一蠕虫，已引起人们的广泛重视。由于蠕虫传播速度极快，安全厂商很难迅速获得检测相应蠕虫的恶意代码的特征，而特征的迟后获得可能会给用户带来很大的潜在危害，因此，本文从协议分析的角度提出了一种特征的自动生成方法，并将产生的特征用来检测蠕虫，取得了良好的效果，并在此基础上用实例探测的方法进一步提高了准确性（降低了漏报与误报）。

System Design and Implement of Automated Signature Generation for Worms

The development of the computer and the Interact gives the convenience to the human, while takes the good conditions to the spreading of the malicious code.. Worms-a kind of malicious code with fast spread, destroy serious and intelligent have attracted extensive attention. As the fast spread of the worms, it is difficult to generate the signature for the worms in time, while it can take great potential harm to delay the signatures generation. So, this paper takes a automatic signature generation from the protocol analyzer, and detected the worms according the signatures with a good result, using the probing method to improve the accuracy（lower the false positives and false negatives）.