Processor instruction abnormal behavior detection method and system
The invention belongs to the technical field of network security, and particularly relates to a processor instruction abnormal behavior detection method and system, and the method comprises the steps:building corresponding instruction sets for different processors; performing fuzzy test on the instr...
Gespeichert in:
Hauptverfasser: | , , , , , |
---|---|
Format: | Patent |
Sprache: | chi ; eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | The invention belongs to the technical field of network security, and particularly relates to a processor instruction abnormal behavior detection method and system, and the method comprises the steps:building corresponding instruction sets for different processors; performing fuzzy test on the instruction set of the target processor, generating an instruction search sample and an instruction sample library, and performing labeling processing on a sample instruction according to an instruction function and characteristics; performing anomaly detection on the to-be-detected instruction according to the labeled sample instruction, and determining whether the to-be-detected instruction is a suspicious instruction or a normal instruction; determining whether the suspicious instruction or the normal instruction is an abnormal instruction or not through comparison according to the operation before and after the target instruction is executed and the execution result; for the abnormal instruction, sorting the abnorma |
---|