Processor instruction abnormal behavior detection method and system

The invention belongs to the technical field of network security, and particularly relates to a processor instruction abnormal behavior detection method and system, and the method comprises the steps:building corresponding instruction sets for different processors; performing fuzzy test on the instr...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: WU HAOLAN, WANG HONGMIN, WEI QIANG, WU ZEHUI, YIN ZHONGXU, ZHOU GUOMIAO
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention belongs to the technical field of network security, and particularly relates to a processor instruction abnormal behavior detection method and system, and the method comprises the steps:building corresponding instruction sets for different processors; performing fuzzy test on the instruction set of the target processor, generating an instruction search sample and an instruction sample library, and performing labeling processing on a sample instruction according to an instruction function and characteristics; performing anomaly detection on the to-be-detected instruction according to the labeled sample instruction, and determining whether the to-be-detected instruction is a suspicious instruction or a normal instruction; determining whether the suspicious instruction or the normal instruction is an abnormal instruction or not through comparison according to the operation before and after the target instruction is executed and the execution result; for the abnormal instruction, sorting the abnorma