METHOD AND DEVICE FOR FEATURE EXTRACTION

摘要

Provided are a method and device for feature extraction. The method comprises: acquiring a batch of black sample files and white sample files from an application layer of a smart terminal operating system; parsing each file, acquiring information structure of all functions contained in each file, and computing a checksum for each function; determining whether or not the files contain the functions corresponding to the checksums, thus compiling statistics on the number of occurrences of each function in the black sample files and the white sample files; and, extracting a black sample feature on the basis of functions occurring only in the black sample files and not occurring in the white sample files, or extracting a white sample feature on a similar basis.

主权项

1. A method for feature extraction, wherein the method comprises:
acquiring a batch of black sample files and white sample files from an application layer of an intelligent terminal operating system; parsing each file to acquire information structures of all functions contained in each file, and calculating a check code for each function; determining whether the files contain the functions corresponding to the check codes, and thus counting the occurrence number of each function in the black sample files and the white sample files; and extracting a black sample feature on the basis of functions occurring only in the black sample files but not occurring in the white sample files, or extracting a white sample feature on the basis of functions occurring only in the white sample files but not occurring in the black sample files.