Unknown virus detection method based on Win32 API and SVM
Tan Huayong · Computer Engineering and Applications Journal · 2011
This paper proposes a new approach to detect the unknown viruses under the Windows platform.The main aim of the method is to achieve the detection of unknown viruses by analyzing the Win32API sequences of the PE files,using SVM to classify the k-length API sequences,and analyzing the risk level of API functions to improve the accuracy of SVM. The experimental results show that proposed method is more efficient than that of which only considers SVM.