Signatures extraction method based on classification of malicious software
Mingyu Fan · Journal of Computer Applications · 2011
Internet has become the main method of malware's transmission.Because there is no difference between normal data and malware in the form of network packets,traditional methods can not detect them effectively.Through improving current signatures extraction method,this paper proposed an extraction method based on the classification of malicious code,which can promote detection efficiency and the ability of distinguishment when the detection engine only got part of malicious software.