METHOD AND SYSTEM FOR PROGRAM IDENTIFICATION BASED ON MACHINE LEARNING

摘要

A method and system for program identification based on machine learning, the method includes: analyzing an unknown program input, extracting characteristics of the unknown program; roughly classifying for the unknown program according to the extracted characteristics; estimating by inputting the unknown program to a corresponding decision-making machine generated by training according to a result of the rough classification; outputting an identification result of the unknown program, wherein the identification result is a malicious program or non-malicious program. The embodiment of the invention adopts machine learning technology, achieves the decision-making machine for identifying malicious programs by analyzing a large number of program samples and can save a lot of manpower and improve identification efficiency for malicious programs by using the decision-making machine; furthermore, can find the inherent laws of programs based on data mining for massive programs, prevent malicious programs that has not happened and make malicious programs difficult to avoid killing.