Identification of executable files on the basis of statistical criteria
暂无分享,去创建一个
The paper considers methods of identification of executable signatures using statistical criteria. Identification here should be understood as a process of file recognition by establishing its coincidence with a particular program. New ways to creation of executable file signatures are considered. A new approach to identification of elf-files based on the Chi-square and Kolmogorov-Smirnov criteria is offered. Restrictions and conditions of using these criteria are considered. The proposed method can be used to audit data-storage medium.
[1] Irina E. Krivtsova,et al. METHOD OF EXECUTABLE FILTS IDENTIFICATION BY THEIR SIGNATURES , 2016 .
[2] S. Harrison,et al. Applied statistical analysis , 1984 .
[3] F. N. Shago,et al. TECHNIQUE OF OPTIMAL AUDIT PLANNING FOR INFORMATION SECURITY MANAGEMENT SYSTEM , 2014 .