Instruction set recognition method and device based on information entropy gain svm model

An identification method and information entropy technology are applied in the field of instruction set identification methods and devices based on an information entropy gain SVM model, and can solve problems such as instruction parsing and identification that cannot be binary.

Active Publication Date: 2022-06-21
ELECTRIC POWER RES INST OF GUANGXI POWER GRID CO LTD
View PDF9 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide an instruction set identification method and device based on the information entropy gain SVM model, which can solve the problem that binary instructions cannot be clearly analyzed and identified due to the lack of ELF header information in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Instruction set recognition method and device based on information entropy gain svm model
  • Instruction set recognition method and device based on information entropy gain svm model
  • Instruction set recognition method and device based on information entropy gain svm model

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0053] The embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings.

[0054] The embodiments of the present disclosure are described below through specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only some, but not all, embodiments of the present disclosure. The present disclosure can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments may be combined with each other under the condition of no conflict. Based on the embodiments in the present disclosure, all ot...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides an instruction set identification method and device based on an information entropy gain SVM model, wherein the method includes: collecting complete binary files and classifying them; dividing the collected binary files into instructions; and calculating the information entropy gains of different instructions , sort all instruction sets in descending order according to the information entropy gain, select the first N features with the highest information entropy gain, and obtain the data set D; input the data set D into the SVM model of the linear kernel function for training, and obtain the trained SVM Model; use the trained SVM model to recognize ELF files. The present invention classifies a large number of ELF files and trains the SVM model. And judge the instruction set category of the unknown file through the trained instruction set recognition model. Even if the header information of the ELF file is missing, it will not affect the recognition of the binary file.

Description

technical field [0001] The invention relates to an instruction set identification and classification method, in particular to an instruction set identification method and device based on an information entropy gain SVM model. Background technique [0002] With the further integration of industrialization and informatization, open and standardized Internet technologies are increasingly applied to industrial control networks, so the power industry control network structure system becomes increasingly complex. The traditional IT information field has many defects and security risks in operating systems, network communication protocols, etc., and connecting the industrial control system to the Internet or other public networks may lead to the exposure of the security problems of the industrial control system. Increased risks to industrial control systems. In the actual industrial use environment, the lack of ELF header information in the firmware of embedded devices often occur...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): G06K9/62
CPCG06F18/2411G06F18/214
Inventor 宾冬梅杨春燕余通凌颖黎新韩松明
Owner ELECTRIC POWER RES INST OF GUANGXI POWER GRID CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap