Malicious program packing detection method and system based on multi-dimensional weighting

The invention relates to a malicious program packing detection method and system based on multi-dimensional weighting, and belongs to the technical field of information security. According to the method, the program is analyzed from the three dimensions of the file format, the data confusion degree and the data content, the shelled program and a common program are comprehensively compared, disguise of the shelled program can be effectively resisted, and the problem that feature detection is low in stability from a single angle is solved. The features are quantized, so that the features can directly participate in mathematical calculation, and the features are standardized by using a probability formula, so that a calculation result has probabilistic significance. The entropy weight method is used for calculating the weight, so that the influence of subjective factors on each feature weight is effectively avoided, and the objectivity of the detection system is effectively ensured. And judgment is carried out i