首页>
外国专利>
System and method for detecting harmful files executable on a virtual stack machine based on parameters of the files and the virtual stack machine
System and method for detecting harmful files executable on a virtual stack machine based on parameters of the files and the virtual stack machine
展开▼
机译:基于文件和虚拟堆栈机的参数检测在虚拟堆栈机上可执行的有害文件的系统和方法
展开▼
页面导航
摘要
著录项
相似文献
摘要
Disclosed are method and system for detecting harmful files executed by a virtual stack machine. An example method includes: analyzing a file executable on the virtual stack machine to identify both parameters of a file section of the file and parameters of a function of the virtual stack machine when executing the file; identifying, in a database, at least one cluster of safe files based on the identified parameters of the file section of the file and the identified parameters of the virtual stack machine; creating, using at least one clustering rule, a data cluster based on the identified at least one cluster of safe files; calculating at least one checksum of the created data cluster; and determining that the file executable on the virtual stack machine is harmful if the computed at least one checksum matches a checksum in a database of checksums of harmful files.
展开▼