A signature matching optimization policy for anti-virus programs

Bo Li*, Eul Gyu Im

*Corresponding author for this work

Research output: Chapter in Book/Conference Proceeding/ReportConference Paper published in a bookpeer-review

1 Citation (Scopus)

Abstract

Virus signature library is key factor for performance of anti-virus programs considering accuracy and scanning speed. To ensure coverage of various emerging viruses, the scale of signature library grows larger and the consequence is lower efficiency because of the need of matching against more signatures. This paper's target is to decrease the signature mapping cost by optimizing signature library. Taking advantage of common conduct characteristics of viruses such as self replica and seasoning, this paper proposed optimization policy against this scalable issue with help of data mining. The data simulation shows significant potential performance improvement using the proposed optimization policy.

Original languageEnglish
Title of host publicationICCRD2011 - 2011 3rd International Conference on Computer Research and Development
Pages1-3
Number of pages3
DOIs
Publication statusPublished - 2011
Externally publishedYes
Event2011 3rd International Conference on Computer Research and Development, ICCRD 2011 - Shanghai, China
Duration: 11 Mar 201115 Mar 2011

Publication series

NameICCRD2011 - 2011 3rd International Conference on Computer Research and Development
Volume1

Conference

Conference2011 3rd International Conference on Computer Research and Development, ICCRD 2011
Country/TerritoryChina
CityShanghai
Period11/03/1115/03/11

Keywords

  • probability
  • session
  • signature library
  • signature sequence
  • virus

Fingerprint

Dive into the research topics of 'A signature matching optimization policy for anti-virus programs'. Together they form a unique fingerprint.

Cite this