BEHAVIORAL OF MALWARE CHARACTERISTICS EXTRACTION DEVICE, METHOD, AND PROGRAM FOR PERFORMING THE SAME

摘要

A method for extracting behavior characteristics, the method comprising: generating call vector information according to call stack information; Classifying the call vector information into a set of malicious codes by comparing different call vector information; Calculating a similarity score of the malicious code according to the call matching information and the call similarity information; And extracting behavioral characteristic information according to the similarity score.