作者: Grégoire Jacob , Eric Filiol , Hervé Debar
DOI: 10.1109/ARES.2010.59
关键词:
摘要: Abstract virology has seen the apparition of successive viral models, all based on Turing-equivalent formalisms. Considering recent malware, these are only partially covered because functional formalisms do not support interactive computations. This article provides a basis for unified malware model, founded Join-Calculus. In terms expressiveness, process-based model supports fundamental notion self-replication but also interactions, concurrency and non-termination to cover evolved malware. protection, detection undecidability prevention by isolation still hold. Additional results established: calculus fragments where is decidable, definition non-infection property, potential solutions restrict propagation.