基于FMEA的应用软件恶意性检查的研究

FMEA(失效模式与后果分析)是一种工程开发的重要思想.将FMEA的思想应用到软件恶意性检查之中,针对恶意软件的特点,提出了软件恶意性检测系统的协议及理论,详细设计了软件恶意性检测系统的方案,着重在软件的行为特征检测方面进行了剖析.实现了对于进程信息和网络相关信息的综合分析和异常情况判断,并以内核驱动程序的方式实现了对注册表信息和文件操作的动态监控,达到了比较准确地判断和识别恶意程序的目的,最后给出了一个在实际系统中的应用实例和测试结果.

Research on checking of malicious application software based on FMEA

FMEA(failure mode and effects analysis) is an important method in project research.The FMEA thought is applied to the software malicious detection,a theory and a protocol of detecting the target software are brought forward and a project is designed carefully in allusion to the malicious software characteristics,especially in the action characteristic after the target software running.It is achieved to analyze the process and net-related information synthetically and to judge the abnormal conditions at the same time.Also,it comes true to monitor the dynamic actions to the registry and the files in the form of kernel drivers.Then,the malicious software is identified more exactly.An application example and test results are given.