Research on Software Behavior Evaluation Method Based on System Calls

摘要

Software anomaly behavior detection depends on the software behavior modeling. The key of software behavior model based on system call is the maturity level of the model. Based on the analysis of currently used software behavior modeling method, Combined with variable-length sequence model and VT-Path virtual path model's advantages, an improved software behavior model is presented, and apply this model to software behavior evaluation system. Experimental results show that the software behavior evaluation system based on this model is able to evaluate and judgment the malicious behavior of software.