基于免疫和代码重定位的计算机病毒特征码提取与检测方法

针对当前感染率高、威胁性极大的感染型计算机病毒，提出了一种基于免疫和代码重定位的计算机病毒特征码提取与检测方法.借鉴生物免疫系统机理，定义了计算机系统中的自体、非自体、抗体、病毒检测器、病毒基因等免疫概念，利用感染型病毒独特的代码重定位特性来提取病毒基因、构建病毒基因库，并在此基础上建立了自体/非自体、病毒基因库和病毒检测器动态演化模型.理论分析与实验结果表明，本方法有效克服了传统方法存在的自体集完备性问题和病毒检测器抗体完整性问题，因而比传统方法有更好的效率与适应性. 

Signature Extraction and Detection Method of Computer Viruses Based on Immunity and Code Relocation

A novel signature extraction and detection method of computer viruses based on immunity and code relocation was proposed to solve the current infection and threat of computer viruses. Referencing the biology immunity mechanism, some definitions such as self, nonself, antibody, viruses'' detectors, and viruses'' gene were established. Making use of the code relocation to extract viruses'' gene in the computer viruses, a viruses'' gene pool was constructed. And the dynamic evolution equations of self and nonself, viruses'' gene pool, and viruses'' detectors were established. The theoretical analysis and experimental results show that the proposed method can effectively overcome the problem of the self maturity and the integrity of viruses'' detectors. Compared with tradition method, the proposed method shows better efficiency and adaptability.