作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2006, Vol. 32 ›› Issue (10): 18-21.

• 博士论文 • 上一篇    下一篇

基于多重朴素贝叶斯算法的未知病毒检测

张波云 1,2,殷建平1,蒿敬波1,张鼎兴1   

  1. 1. 国防科技大学计算机学院,长沙410073;2. 湖南公安高等专科学校计算机系,长沙 410138
  • 出版日期:2006-05-20 发布日期:2006-05-20

Unknown Computer Virus Detection Based on Multi-naive Bayes Algorithm

ZHANG Boyun1, 2, YIN Jianping1, HAO Jingbo1, ZHANG Dingxing1   

  1. 1. School of Computer Science, National University of Defense Technology, Changsha 410073;2. Dept. of Computer Science, Hunan Public Security College, Changsha 410138
  • Online:2006-05-20 Published:2006-05-20

摘要: 提出了一种基于多重朴素贝叶斯分类算法的检测方法来实现对计算机病毒的近似判别。该法可以克服病毒特征代码扫描法不能识别未知病毒的缺点。在该检测方法的基础上,设计了一个病毒检测网络模型,该模型既可以实现对已知病毒的查杀,又可以对可疑程序行为进行分析评判,最终实现对未知病毒的识别。

关键词: 计算机病毒;多重朴素贝叶斯算法;信息熵;病毒检测

Abstract: A multi-naive Bayes algorithm to detect computer virus approximately is presented in this paper. It can overcome the shortage of normal virus scanner, which could not detect unknown virus. Based on this method, a virus detect network model is also designed. This model is fit for detecting virus in the on-line system; it could detect known and unknown computer virus by analyzing the program’s behavior

Key words: Computer virus; Multi-naive Bayes algorithm; Information entropy; Virus detection