摘要： 针对传统反病毒引擎的体系结构难于扩展的缺点，通过分析其数学模型，提出新的基于触发检测逻辑的反病毒引擎模型，实现相应的原型系统。利用增加特征码的语义来抽取固化的检测逻辑，提高反病毒引擎的可扩展性，增强对新病毒及病毒变种的检测能力。实验结果证明，该引擎可以检测出11种常见病毒的变种，具有较高的准确性。
关键词:
反病毒引擎,
特征码,
程序行为
Abstract: Aiming at the problem that traditional anti-virus engine architecture is difficult to expand, this paper presents a novel detection model based on trigger logic by analyzing the mathematical model of anti-virus engine, realizes the relative prototype system. The detection logic which embedded in the structure is separated from the new anti-virus engine by intelligent characteristic code to improve the capacity expansion and enhance the detection capacity. Experimental result shows that this engine is highly effective on recognition rate, it can detect eleven kinds of common virus variation.
Key words:
anti-virus engine,
characteristic code,
program behavior
中图分类号:
王海峰;. 基于智能特征码的反病毒引擎设计[J]. 计算机工程, 2010, 36(3): 145-147.
WANG Hai-feng;. Design of Anti-virus Engine Based on Intelligent Characteristic Code[J]. Computer Engineering, 2010, 36(3): 145-147.