SYSTEM AND METHOD FOR CREATING APPLICATION BEHAVIOUR MODEL SCRIPTS

摘要

FIELD: physics, computer engineering.;SUBSTANCE: invention relates to malware detection systems. The method of creating behaviour model scripts based on security rating rules consists of steps of: determining problematic rules which are simultaneously activated on both malicious and safe applications; for a problematic rule, selecting a group of applications for which said rule is activated; and finding at least one difference from the problematic rule, the activation of which together with the activation of the problematic rule enables to select from the selected group of applications only malicious or only safe applications; creating a behaviour model script based on the problematic rule and at least one of the found rules, different from the problematic rule, the activation of which together with the activation of the problematic rule enables to select from the selected group of applications only malicious or only safe applications, wherein the behaviour model script is used to adjust the security rating of the selected group of applications.;EFFECT: creating behaviour model scripts based on security rating rules.;11 cl, 3 dwg, 4 tbl