文件型病毒的形式化定义及识别算法

病毒定义是反病毒技术研究的基础,安全专家一直没能准确定义病毒与普通程序的区别。针对最为常见、破坏性强的文件型病毒,本文提出以遵循用户意愿为判断标准,给出了其形式化定义。根据新定义,可以构造出准确识别病毒的算法。同时,实际的恶意程序案例分析表明,它们绝大多数在新定义范围之内。

Formalized Defination and Recognition Algorithm of File-type Virus

The defination of viruses is the basis for the research of anti-virus technologies techniques,and the security experts till now have not had an exact definition of the distinctions between the virus and the ordinary programme.According to the most common destructive file-type viruses,this paper,take the user's desire as the judgement criterion,gives its formalized definition,upon which an algorithm for exactly recognizing the virus is formulated.The analysis on the case of actual malicious programme indicates that most of viruses are within the limits of the new definition.