FIELD: information technology.
SUBSTANCE: method of detecting unknown harmful objects in which: a set of characteristics is formed, each describing the object, for all objects from a data base of harmful and dangerous objects; for each characteristic, at least one method of processing the characteristic of the object is selected; the level of detecting harmful objects is determined for at least one method of processing the characteristic of the object; the level of false activation is determined for at least one method of processing the characteristic of the object; efficiency is calculated for at least one method of processing the characteristic of the object by estimating the ratio of the level of detection to the level of false activation; the processing method is selected for which efficiency of detecting harmful objects is maximum; the selected processing method is used to detect unknown harmful objects.
EFFECT: high efficiency of detecting unknown harmful objects.
18 cl, 15 dwg
| Title | Year | Author | Number |
|---|---|---|---|
| SYSTEM AND METHOD OF ADAPTING PATTERNS OF DANGEROUS PROGRAM BEHAVIOR TO USERS' COMPUTER SYSTEMS | 2017 |
|
RU2652448C1 |
| METHOD AND SYSTEM FOR ANALYSING OPERATION OF SOFTWARE DETECTION RULES | 2013 |
|
RU2568285C2 |
| METHOD OF SELECTIVE USE OF PATTERNS OF DANGEROUS PROGRAM BEHAVIOR | 2017 |
|
RU2665909C1 |
| SYSTEM AND METHOD FOR IMPROVING QUALITY OF DETECTING MALICIOUS OBJECTS USING RULES AND PRIORITIES | 2012 |
|
RU2514140C1 |
| METHOD OF DETECTING MALICIOUS FILES USING LINK GRAPH | 2023 |
|
RU2823749C1 |
| METHOD FOR AUTOMATIC GENERATION OF HEURISTIC ALGORITHMS FOR SEARCHING FOR MALICIOUS OBJECTS | 2012 |
|
RU2510530C1 |
| SYSTEM AND METHOD OF CLASSIFICATION OF OBJECTS | 2017 |
|
RU2679785C1 |
| SYSTEM AND METHOD FOR AUTOMATIC MODIFICATION OF ANTIVIRUS DATABASE | 2012 |
|
RU2536664C2 |
| SYSTEM AND METHOD OF DETECTING MALICIOUS FILES OF CERTAIN TYPE | 2014 |
|
RU2583712C2 |
| SYSTEM AND METHOD OF MACHINE TRAINING MODEL OF DETECTING MALICIOUS FILES | 2017 |
|
RU2673708C1 |
