Macroscopic Treatment to E-mail Based Viruses

摘要

The previous researches to treat the e-mail based viruses have done in two categories. The first wax analysis and. signature extraction, to search the body of virus statically, and the second was monitoring suspicious behaviors. Both of them can be regarded as microscopic ways. However, these methods have limitation. The first method can not detect unknown viruses and the second one need background program which can require heavy compulation of target host, which will be protected. Thus, to overcome the limitation of previous works, the research of this paper suggests the idea which can detect unknown viruses still do not require high computing power of each host. In this paper we will show that the spread of viruses can be contained and the number of infected clients also decreases at the equilibrium state by advancing some portion of e-mail servers. In this context our research is based on macroscopic view.