【摘要】 由于传统的恶意程序分析过程往往复杂耗时,即使是经验丰富的安全分析人员也很难发现潜在的攻击模式。为减轻认知负担、提高交互性,将信息可视化技术引入恶意代码分析领域,即Malware安全可视化,正是近年来网络安全研究中的前沿热点。首先说明Malware安全可视化的紧迫性,接着分别从静态特征、动态主机特征和网络特征三个方面,详细分析了多项Malware安全可视化实例,最后讨论了该领域当前存在的问题及今后的研究方向。更多还原

【Abstract】 Since traditional malicious code analysis process is usually sophisticated and time consuming,it is very difficult to obtain potential attack mode by even experienced security analysts. To reduce cognition burden and improve interactivity,we introduce information visualisation technology to malware code analysis field,i. e. Malware security visualisation,which is just the frontier focus of network security research in recent years. First,we explain in the paper the urgency of the Malware security visualisation. After that,we give an elaborate analysis on multiple Malware security visualisation examples from the following three aspects: static feature,dynamic host feature and network feature. Finally,we discuss the existing problems and the research direction in this field.更多还原