Evaluation methodology and theoretical model for antiviral behavioural detection strategies

摘要: Behavioural analysis for detection of malware has recently emerged as a new promising set antiviral techniques: function-based is now considered along with sequence-based detection. Most the antivirus publishers claim to use behavioral marketing argument. But real impact these “new” techniques seems be mitigated since no progress in general fight been noticed nowadays. This paper presents an evaluation methodology capabilities software respect analysis. It shown that contrary claims some publishers, behavioural still very marginally used and implemented. These are quite always either validated by or dependant on classical form-based methods (detection pattern example). In this context, we propose generalised, theoretical model which considers at same time both give essential properties should exibhit achieve behavioural-based