|Hybrid syntactic/semantic computer virus detection scheme|
du groupe Modélisation et Verification
|Date|| 2011-05-12 11:30-12:30|
|Titre||Hybrid syntactic/semantic computer virus detection scheme |
|Résumé||The detection problem in computer virology is known to be undecidable. Nonetheless, a large body of work is still devoted to the subject. We will present the state of the art on detection schemes: the syntactic and semantic detection schemes.
Subsequently, we will introduce a new hybrid syntactic/semantic detection scheme, where the extraction of the virus signature is performed through abstract interpretation techniques while virus detection is let to efficient syntactic detectors. We will present a new abstract domain that is able to automatically extract the signature of a polymorphic virus as a context free grammar. Preliminary results on some real polymorphic virus samples will also be shown. |
|Orateur||Renaud Tabary |
Aucun document lié à cet événement.RetourRetour à l'index