9121100841243007401KMPO(m+n),kMNPaydata[]//for(codedata[]data++){If(Kmp(code,data))//KMPdata[]{Dosth;//}}O(K(M+N))Pay=k(m+n)()Pay()kk2(1976-)(1986-)102.12.211CPU3223.13113if-then3.2444[1]..[].2009.[2]..().2008.[3],...2004.[4],.Windows..2009.[5]SINGHPK;LAKHOTINAStaticverificationofwormandvirusbehaviorinbinaryexecutablesusingmodelchecking2003.esearchofDetectionTechnologybasedonMaliciousCodeShenChengdong1,SongBomin21.NavyInstituteofComputingTechnology,Beijing,100841,China2.Schoolofcomputerscienceandtechnology,HuazhongUniversityofScienceandTechnology,Hubei,430074,ChinaAbstract:Maliciouscodedetectionisanimportantmeanstoensurethesecurityofinformationsystems.Withthetraditionalsignaturematchingheuristicdetection,andevencodedetectionbasedonneuralnetworks,thedevelopmentoftheentiredetectionmeansisonthewayoftobemoreintelligentwiththeabilitytoautomaticallyadapttomore,andthedetectionsystemisalsogrowingwithautomaticanalysisandautomaticlearning.Keywords:codedetection;signaturerecognition;heuristicdetection;expertsystem;neuralnetwork