Evènement pour le groupe Modélisation et Verification

Date 2011-05-12  11:30-12:30
TitreHybrid syntactic/semantic computer virus detection scheme 
RésuméThe detection problem in computer virology is known to be undecidable. Nonetheless, a large body of work is still devoted to the subject. We will present the state of the art on detection schemes: the syntactic and semantic detection schemes. Subsequently, we will introduce a new hybrid syntactic/semantic detection scheme, where the extraction of the virus signature is performed through abstract interpretation techniques while virus detection is let to efficient syntactic detectors. We will present a new abstract domain that is able to automatically extract the signature of a polymorphic virus as a context free grammar. Preliminary results on some real polymorphic virus samples will also be shown. 
OrateurRenaud Tabary 

Aucun document lié à cet événement.

Retour à l'index