机器内部的达尔文：恶意软件的演变及其对计算机安全的影响
Darwin inside the machines: Malware evolution and the consequences for computer security
摘要：
反恶意软件技术的最新进展已经引导安全行业从维护庞大的签名数据库转向更新的防御技术，如行为阻止，应用程序白名单等。大多数人会同意，这背后的原因是为了跟上近三十年前恶意软件作者和安全社区之间建立的军备竞赛。尽管如此，恶意软件作者还没有创造新的范例。实际上，恶意代码开发仍然主要限于利用多态和变形引擎以及可执行打包器和包装器技术来改变代码模式。每个新的恶意软件实例都保留了与其祖先完全相同的核心功能，只是改变了它的外观。相反，如果恶意软件能够自动改变其功能或行为呢？如果在没有人为干预的情况下，计算机病毒就像生物病毒一样，一旦新的防御技术生效，它们就能适应新的防御技术，那会怎么样？在本文中，我们将提供恶意软件实现背后的理论证据，该恶意软件实现紧密地模仿达尔文进化论。
英文摘要：
Recent advances in anti-malware technologies have steered the security industry away from maintaining vast signature databases and into newer defence technologies such as behaviour blocking, application whitelisting and others. Most would agree that the reasoning behind this is to keep up with the arms race established between malware writers and the security community almost three decades ago. Still, malware writers have not as yet created new paradigms. Indeed, malicious code development is still largely limited to code pattern changes utilizing polymorphic and metamorphic engines, as well as executable packer and wrapper technologies. Each new malware instance retains the exact same core functionality as its ancestor and only alters the way it looks. What if, instead, malware were able to change its function or behaviour autonomously? What if, in the absence of human intervention, computer viruses resembled biological viruses in their ability to adapt to new defence technologies as soon as they came into effect? In this paper, we will provide the theoretical proof behind malware implementation that closely models Darwinian evolution.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
