Auto-detection system of suspicious file based on virtual machine technology
Zhong Ming-quan, Huanzhou Li, Zhangguo Tang, Jian Zhang · Journal of Computer Applications · 2010
Concerning the feature that the technology of characteristic code is unable to detect new and unknown baleful program,an auto-detection system of suspicious file based on technology of virtual machine and behavior analysis was proposed.Work diagram of detection system was introduced with emphasis,module framework of management center and detection center of the system was given,and the technical principle of management center and detection center was analyzed in detail.The experimental results show that the system can judge rapidly the dangerous level of one detected file and the system has long life cycle.