 | Some question about ClamAV's algorithm |  |
annt3k
Joined: 30 Oct 2013 |
Posts: 0 |
Location: VietNam |
|
 |
Posted: Wed Oct 30, 2013 12:53 pm |
|
 |
 |
 |
 |
Hi!
I'm planning to test my parallel algorithm for virus detection.
So I choose ClamAV's engine to implement my algorithm.
I have dowloaded ClamAV source code at
https://github.com/vrtadmin/clamav-devel
I open it with Visualstudio and start with it.
But I can't find where the algorithms are implemented in to change it.
Please point me where i have to concern to test my algorithm.
Any help would be really appreciated.
Thanks!!!
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Oct 30, 2013 2:46 pm |
|
 |
 |
 |
 |
The algorithms are contained in clamscan.exe.
Clam AV primarily uses static virus signatures, but I hope that you will use some algorithms that are not dependent upon static signatures so that you can detect malware for which there are no traditional signatures. A good AV needs some of these signatures because most malware is now changed often (sometimes hourly) to avoid the static signatures.
Regards,
|
|
annt3k
Joined: 30 Oct 2013 |
Posts: 0 |
Location: VietNam |
|
 |
Posted: Thu Nov 07, 2013 2:34 am |
|
 |
 |
 |
 |
Thanks you for prompt respond.
I have read the source code for several day.As I know,ClamAV use Wu-Manber algorithm.
Do you know where's the source code of Wu-Manber algorithm in ClamAV?
Thanks!!!
|
|
xqrzd
Joined: 18 Feb 2013 |
Posts: 0 |
|
|
 |
Posted: Thu Nov 07, 2013 10:31 pm |
|
 |
 |
 |
 |
AFAIK ClamAV doesn't use Wu-Manber, but I'm not certain. You can take a look at matcher-bm and matcher-ac to see ClamAV's implementation of Boyer-Moore and Aho-Corasick.
The ClamAV mailing list is probably a better place to ask this question, as you can get an answer from a developer.
|
|
annt3k
Joined: 30 Oct 2013 |
Posts: 0 |
Location: VietNam |
|
 |
Posted: Fri Nov 08, 2013 1:59 pm |
|
 |
 |
 |
 |
Thanks you!!!That's true.
ClamAV calls it the Boyer-Moore (BM) algorithm, but the algorithm
actually operates in the same way as the WM algorithm.
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by
phpBB © phpBB Group
Design by
phpBBStyles.com |
Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.