FIELD: information security.
SUBSTANCE: method for changing the malware detection rule includes the stages of: using and storing at least one malware detection rule in the form of a set of conditions, wherein the analysed object is considered malware-containing when complying to said set of conditions; collecting data on the use of the stored malware detection rule; identifying the presence of a type I or II error when using the malware detection rule by means of the error detection rules based on the collected data; if an error is identified when using the malware detection rule, making a in the used malware detection rule by changing at least one condition from the set of conditions of the used malware detection rule in accordance with the identified error.
EFFECT: ensured information security due to the change in the set of conditions of the malware detection rule when detecting an error while using the malware detection rule.
8 cl, 3 dwg
Title | Year | Author | Number |
---|---|---|---|
SYSTEM AND METHOD FOR IMPROVING QUALITY OF DETECTING MALICIOUS OBJECTS USING RULES AND PRIORITIES | 2012 |
|
RU2514140C1 |
SYSTEM AND METHOD OF CREATING ANTIVIRUS RECORD | 2018 |
|
RU2697954C2 |
ELIMINATION OF FALSE ACTIVATION OF ANTI-VIRUS RECORDS | 2016 |
|
RU2625053C1 |
METHOD OF INCREASING RELIABILITY OF DETECTING MALICIOUS SOFTWARE | 2012 |
|
RU2485577C1 |
METHOD OF DETECTING UNKNOWN PROGRAMS BY LOAD PROCESS EMULATION | 2011 |
|
RU2472215C1 |
SYSTEM AND METHOD FOR ANTIVIRUS SCANNING OF OBJECTS ON A MOBILE DEVICE | 2023 |
|
RU2818877C1 |
METHOD FOR IDENTIFYING INFORMATION SECURITY THREATS (OPTIONS) | 2023 |
|
RU2802539C1 |
SYSTEM AND METHOD OF CREATING SOFTWARE DETECTION RECORDS | 2012 |
|
RU2491615C1 |
SYSTEM AND METHOD OF SELECTING MEANS OF DETECTING MALICIOUS FILES | 2019 |
|
RU2739830C1 |
SYSTEM AND METHOD FOR ANTI-VIRUS SCANNING SETTING | 2015 |
|
RU2617923C2 |
Authors
Dates
2022-07-28—Published
2021-03-15—Filed