| 摘要 |
A computer system (100) and method detect computer viruses spanning multiple data streams. A virus signature is written in the form of a Boolean expression, where the operands of the Boolean expression are signatures of components of the virus. A processor (110) identifies data streams to be scanned and scans the idendfied data streams for components of viruses. Using the scan results, the processor (110) then evaluates the virus signatures, and for any Boolean expression satisfied, the processor (110) determines that the virus corresponding to the expression exists in the scanned data streams.
|
