Deficiency and Improvement of Antivirus Virtual Machine
Chaojing Tang · Information Security and Communications Privacy · 2011
The problem of metamorphic virus detection could be solved by Antivirus Virtual Machine(AVM). In this paper,the working mechanism of AVM is analyzed,three deficiencies of AVM are revealed,including the requirement of manual selection for branch program execution,the incompleteness of program execution process,and the non-equality between the actual and emulated execution time. For the seriousness of the proposed deficiencies of AVM,a series of tests are carried out on the online antivirus platform,and finally the corresponding improvement is proposed to solve the revealed security flaws of AVM. This improved AVM could effectively make up the mentioned deficiencies.