首页>
外国专利>
METHOD OF MODELLING BEHAVIOR PATTERN OF INSTRUCTION SET IN N-GRAM MANNER, COMPUTING DEVICE OPERATING WITH THE METHOD, AND PROGRAM STORED IN STORAGE MEDIUM CONFIGURED TO EXECUTE THE METHOD IN COMPUTING DEVICE
METHOD OF MODELLING BEHAVIOR PATTERN OF INSTRUCTION SET IN N-GRAM MANNER, COMPUTING DEVICE OPERATING WITH THE METHOD, AND PROGRAM STORED IN STORAGE MEDIUM CONFIGURED TO EXECUTE THE METHOD IN COMPUTING DEVICE
According to the present invention, a kind of calculating equipment is provided and executes instruction collection. The calculating equipment may include: that system call hooks have a hook system to call generation by instruction set, which is carrying out simultaneously; A kind of hook system calling which classification extraction device extraction of classification belongs to it; Sequential extraction procedures device extracts one or more system calling for indicating which behavior sequence n-gram mode is hook-shaped from all sequences, by referring to the classification extracted; And model generator, a behavior pattern system model calling is generated, while the instruction set generated is performed, the number behavior sequence based on each extraction occurs. Behavior pattern model is malice for executing instruction to determine whether. The study that the model of behavior pattern is provided as inputting various data mining technologies calculates equipment. ;The 2016 of copyright KIPO submissions
展开▼
