Detection of Virus Based on Replication Behavior
Che Ming · Microprocessors · 2012
Replication is an essential characteristic of all viruses.The detection of virus is based on an approach to detect the replication behavior of virus.The approach focuses on the operations of read and write executed by virus that is replicating.Detecting replication behavior of virus is accomplished by constructing the relation tree of the operations.The experiment analyses the log files of Win32 APIs called by each virus or normal process to detect whether the replication behavior of virus occurs.The results show that it is valid to detect virus through detecting the replication behavior of virus.