The design and implementation of a malicious code behavior detecting model based on virtualization techology
Wei Ma, Ming Wang, Bo Zhu · 2010
Among the existing malicious code detecting methods, the approach that based on code behavior is more practical. In this method, it judges if one code is malicious or not based on behavior the code generated. This way to arbitrate malicious code is more advanced and precise. The malicious code behavior detecting model based on virtualization technology ameliorated the existing technology, it separates code behaviors into virtual behaviors and actual behaviors, then reflected them into virtual circumstance and real circumstance, respectively. Accord to the result generated from the reflect process, the malicious code behavior detecting model could achieve higher precision and reliability.