Revision as of 15:09, 10 April 2016 edit DELL1988 (talk \| contribs) 1 edit m →Malicious code ← Previous edit		Revision as of 15:25, 10 April 2016 edit undo Dcirovic (talk \| contribs) Autopatrolled, Extended confirmed users, Pending changes reviewers, Rollbackers 253,275 edits Reverted 1 good faith edit by DELL1988 using STiki Next edit →
Line 7: Encryption alone is not polymorphism. To gain polymorphic behavior, the encryptor/decryptor pair are mutated with each copy of the code. This allows different versions of some code which all function the same.<ref name="wongstamp">Wong, Wing; Stamp, M. (2006). ''Hunting for Metamorphic Engines''. Journal in Computer Virology. Department of Computer Science, San Jose State University. [http://www.truststc.org/pubs/237/hunting.pdf]</ref> ~~[[User talk:27.23.165.34]]~~== Malicious code == Most [[anti-virus software]] and [[intrusion detection system]]s (IDS) attempt to locate malicious code by searching through computer files and data packets sent over a [[computer network]]. If the security software finds patterns that correspond to known computer viruses or worms, it takes appropriate steps to neutralize the threat. Polymorphic algorithms make it difficult for such software to recognize the offending code because it constantly mutates.

Polymorphic code: Difference between revisions