摘要： 以Internet Explorer浏览器为例,对该技术的算法思想和具体实现过程进行了详细阐述,并给出了实际实验结果。实验结果表明了该技术的可行性和有效性。
关键词:
恶意脚本,
注册表,
自我集,
异常行为检测
Abstract: Based on real-time catching registry table behaviors of applications, a novel registry table anomaly behaviors detecting technology is proposed. The kernel ideas and detailed implementation methods are described by taking Internet Explore browser for example, and the practical experiments are done. The experimental results prove that this technology is feasible and effective.
中图分类号:
鲍欣龙,罗文坚,曹先彬,王煦法. 可用于恶意脚本识别的注册表异常行为检测技术[J]. , 2005, 31(08): 142-144.
BAO Xinlong, LUO Wenjian, CAO Xianbin, WANG Xufa. A Registry Table Anomaly Behaviors Detecting Technology for Recognizing Malicious Scripts[J]. , 2005, 31(08): 142-144.