作者: Angelos D. Keromytis , Salvatore J. Stolfo , Elli Androulaki , Wei-Jen Li
DOI:
关键词:
摘要: Methods, media, and systems for detecting attack are provided. In some embodiments, the methods include: comparing at least part of a document to static detection model; determining whether attacking code is included in based on comparison executing document; execution if determined be one model document, reporting presence an attack. selecting data segment portion electronic arbitrarily selected can altered without causing result error when processed by corresponding program; response that altered, altering produce program produces state program.