Abstract:We present the dynamic information security theory model: P2DR to deal with malware epidemics. The model includes the following stages: detection of a malware epidemic by detection system, establishment of countermeasure strategy in strategy coordination center, activation of protection and response system, defense system activation for real-time protection and response. The process is a periodic one in which the strategy is adjusted dynamically. In the model we propose, the detection system is considered to be the key component. Based on our analysis of traditional IDS architecture, we think that it is not suitable for inspecting high speed network traffic and monitoring multivariant malware epidemics. Therefore, we propose a parallel detection model which can be applied to the backbone network matched with appropriate protocol parsing. Normalized taxonomy is also presented for the detection rules of malware. Five detection rule sets are covered, namely, match rules based on deep content pre-processing, special algorithms, binary level, binary level requiring network information checks, and pure network information. A Virus Detection System is realized based on the framework above.

Novel Virus Active Defense Technique and Detection Algorithm

Host Based Unknown WOrm Detection Using Machine Learning

Study Defense Mechanism of Computer Virus in Lab

Research and Development of Worm Detection Technologies

Method Of Dynamic Script-Virus Detection Based On Immunology

Behavior-Based Proactive Detection of Unknown Malicious Codes

Research on Immune Recognition Model and Algorithm for Unknown Viruses Detection

A Linux Virus Detection Method Using Machine Learning and D-S Theory

VDS : Malware Detection System

Behavior-based Virus Detection Method Using Multi-Class Support Vector Machine

Virus Detection Method Based on Behavior Resource Tree

A virus detection model based on immunology and SVDD

Research of Anti-Anti-Virus and Anti-Virus Technology under New Situation

Development of Windows Malware Detection System Based on Expert System

Virus Detection System – the Architecture of and Approach to A Network Virus Detection System

A Detection Method and System Implementation for Android Malware

Detection Algorithm of Internet Worm Eruption and Its Application

Technique of Detecting Malicious Executables Via Behavioral and Binary Signatures

Novel Online Attack Strategy Recognition Technique

Prototype demonstration: trojan detection and defense system

Study on Virus Signatures based on Matching in Virus-detecting Technologies