Fuzzy Pattern Recognition Method for Virus Detection Based on Sequences of System Calls
Zhang Hong-shui · Journal of Qingdao University · 2007
The behavior characteristics of the typical virus are analyzed.The sequence of system API calls was used to measure the behavior of virus programs.After the classification by Fuzzy Pattern on the behavior of virus programs,the set of the virus behavior characteristic was constructed.Matching the suspicious programs to the set by the method of Fuzzy Pattern Recognition,20 programs are detected under different threshold values.The results show that the best accurate rate can reach 90%.