A method for hidden malcode anomaly detection using dynamic control-flow analysis
一种利用动态控制流路径分析的隐藏恶意代码异常检测方法

The present study proposes a method for hidden malcode detection based on the analysis of dynamic control-flow. First we recorded the malcode-related control-flow paths of program,and then the control-flow paths were analyzed,by calling tree match algorithm,to detect the hidden malcode in the system. The experiments show that this method can detect hidden malcode efficiently at a high detection rate and with low false positive,and thus it can be applied to malcode detection on operating systems.