Malware detection technologies based on software intermediate code
Hong Yang · Journal of Sichuan University · 2013
The intermediate code is a special style of software representation which locates between the machine language and the high level programming language,and it can take advantage of understandable semantic information and actual execution condition for malware analysis.The malicious behavior information and characteristics can be easily found from the semantic information of intermediate code,and malware detection or classification can be realized by analyzing the whole or local information of control flow graph.Machine learning facilitates security information and rules mining in a large number of complex software representations,which is deemed as a kind of advanced malware detection method in recent malware research.This paper categorizes and analyzes the malware research technologies according to the semantic information and control flow structure of software intermediate code,and makes deep analysis to intermediate code processing and application methods based on machine learning.