Усовершенствованная концепция защиты данных на базе многоуровневого анализа карт операционной системы

Abstract

The article developed a multi-level antivirus system, based on the analysis of system events and low-level commands. Architecturally, this system is operationally dependent. Which allows you to create maps of the levels of a specific operating system, based on the differences between device drivers and various system components. Analysis of processes, rather than groups of system components, allows to increase the speed of the system in comparison with existing implementations of heuristic analysis.