Solve the false-positive problem of the mimic system based on the best mimic component set

At present, there is a problem of false positives caused by the too vast mimic scope in mimic transformation technology. Previous studies have focused on the "compensation" method to deal with this problem, which is expensive and cannot fundamentally solve it. This paper provides new insig...

Full description

Saved in:
Bibliographic Details
Published in:China communications 2022-05, Vol.19 (5), p.253-266
Main Authors: Shao, Yuwen, Zhang, Zheng, Wang, Xiaomei, Pan, Chuanxing, Wu, Jiangxing
Format: Article
Language:English
Subjects:
Codes
Computer hacking
Copper
Costs
false-positive rate
mimic scope
mimic transformation
Redundancy
Security
the best mimic component set
Web servers
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:At present, there is a problem of false positives caused by the too vast mimic scope in mimic transformation technology. Previous studies have focused on the "compensation" method to deal with this problem, which is expensive and cannot fundamentally solve it. This paper provides new insights into coping with the situation. Firstly, this study summarizes the false-positive problem in the mimic transformation, analyzes its possible harm and the root causes. Secondly, three properties about the mimic scope are proposed. Based on the three properties and security quantification technology, the best mimic component set theory is put forward to solve the false-positive problem. There are two algorithms, the supplemental method and the subtraction method. The best mimic component set obtained by these two algorithms can fundamentally solve the mimic system's false-positive problem but reduce the cost of mimic transformation. Thus make up for the lack of previous researches.
ISSN:1673-5447
DOI:10.23919/JCC.2021.00.015