|
 |
divendres, 15 / juliol / 2005 |
A physiological decomposition of virus and worm programs, una tesi que tracta de decomposar els cucs en unitats funcionals per tal d'estudiar-los des d'aquesta perspectiva.
Computer viruses and worms may be written in an infinite number of ways. Yet, a dissection of several viruses and worms shows that though differing in code, they have functionally similar components, where a component is one or more noncontiguous statements responsible for a specific behavior or capability of a these programs. Drawing an analogy to organisms, a component may be considered an organ. The thesis identifies a collection of organs that are found in computer viruses and worms. The need for each organ can be reasoned directly from the capabilities required of any of these types of programs. The collection of organs identified then describes the anatomy of a computer virus or worm. Having identified the organs of these programs, the thesis raises the question: Can one automatically detect the presence or absence of these organs in a program? It is hypothesized that techniques that detect a worm or virus by analyzing the code for the presence or absence of specific organs are likely to catch a large variation, mutants or similar species, without explicit training. Such techniques may help in developing virus and worm scanners that are not always lagging the worm attacks.
|
18:54 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
© Copyright 2003-2005 Xavier Caballe.  . Si no s'indica expressament el contrari, el material publicat en aquest weblog es distribueix d'acord amb la llicència Creative Commons. El contingut és responsabilitat única i exclusivament del seu autor i no té cap relació amb les seves activitats professionals.
|
 |
 |
 |
 |
Contingut actualitzat
Categories
Darrers comentaris
Arxiu
Contingut antic
(ja no s'actualitza)
Versions anteriors
d'aquesta pàgina
|
 |
 |
 |
 |
|
