 |
Figure shows the comparison of the processing speed of the two methods. The method of the proposed method did not give a technological change. It can be seen that it is excellent in terms of speed because only files that have changed, such as files with changes and dates with modified dates, are re-scanned from the criteria of examining the entire file. Windows Defender is excellent in overall file inspection.
But As I said earlier, we compare and analyze strings with only the changed contents. Future tasks are expected to increase the detection rate through more detailed analysis, hash value comparison, and advanced analysis algorithms. |
IEEE/ICACT20210176 Slide.14
[Big Slide]