人们熟知的程序有恶意程序和善意程序,然而被病毒感染的程序具有某种特殊性质,可以定义为第三种类别的程序,第三种类别的程序是由本文提出.为了对三种不同类别的程序进行分类,本文提出解决问题的思路是:首先采用恶意权值计算公式对程序行为权值进行计算,判断该程序是善意程序还是恶意程序.如果是某个善意程序的权值发生了变化,那么该善意程序被病毒感染的可能性很大,因此对三种不同属性的程序分析后,最后使用 MMTD算法对这三种程序进行分类:该程序是恶意程序,善意程序还是部分恶意部分善意的程序.%people familiar with the program has a malicious program and goodwill program,but infected by the virus program has some special properties,can be defined as the third categories of program,the third categories of program is put forward by this paper.To classify three different categories of program,this paper puts forward the thought to solve the problem are:first,the malicious weight calculation formula is adopted to the program weight value calculate,the program is goodwill or malicious programs.If it is a goodwill program in the changes of weight value,so the possibility of the goodwill program by the virus infection is very big,therefore after analyzing three different attributes of the program,finally using MMTD algorithm to classify the three programs:this program is malicious programs,goodwill pro-gram or malicious part well -intentioned.
展开▼
