Технологія виявлення поліморфних комп’ютерних вірусів

Abstract

Traditional viruses were computer programs with a static structure that had very limited functionality. After the first detection, their structure is used by the antivirus program (AVP) as a tool to detect similar viruses with similar patterns. However, modern viruses can configure themselves and even change the structure of their functionality, which makes it difficult for antivirus software to detect them. A polymorphic virus is a complex computer virus that affects data types and functions, making it difficult to inspect its internal structure. The article reviews the general methods used by these viruses to demonstrate polymorphism; modern level of detection of polymorphic viruses; antivirus software to detect such viruses. The results of this study can be a source of knowledge for researchers and antivirus software companies.