The paper considers methods of identification of executable signatures using statistical criteria. Identification here should be understood as a process of file recognition by establishing its coincidence with a particular program. New ways to creation of executable file signatures are considered. A new approach to identification of elf-files based on the Chi-square and Kolmogorov-Smirnov criteria is offered. Restrictions and conditions of using these criteria are considered. The proposed method can be used to audit data-storage medium.

Original languageEnglish
Title of host publicationProceedings of the 20th Conference of Open Innovations Association, FRUCT 2017
EditorsAlla Levina, Sergey Balandin, Tatiana Tyutina
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages202-208
Number of pages7
ISBN (Electronic)9789526865300
DOIs
StatePublished - 18 Oct 2017
Event20th Conference of Open Innovations Association, FRUCT 2017 - Saint Petersburg, Russian Federation
Duration: 2 Apr 20176 Apr 2017

Publication series

NameConference of Open Innovation Association, FRUCT
Volume2017-April
ISSN (Print)2305-7254

Conference

Conference20th Conference of Open Innovations Association, FRUCT 2017
Country/TerritoryRussian Federation
CitySaint Petersburg
Period2/04/176/04/17

    Scopus subject areas

  • Computer Science(all)
  • Electrical and Electronic Engineering

ID: 53919235