Перегляд за Автор "Protsyshyn, I. I."
Зараз показуємо 1 - 1 з 1
Результатів на сторінці
Налаштування сортування
Документ Відкритий доступ Model and Method of Policy-Driven Backdoor Detection on Endpoints with Secure Signature Distribution and Optimized Scan Execution(КПІ ім. Ігоря Сікорського, 2026) Protsyshyn, I. I.; Stopochkina, I. V.This paper proposes a policy-driven model for backdoor detection on endpoints, in which signature-based scanning is combined with scan execution policies and secure rule-set updates. The practical implementation of the approach is oriented toward a prototype that includes an endpoint agent, a trusted local cache of signature sets, scanning profiles, and a YARA-compatible engine. A priority function is proposed that takes into account whether an object belongs to autorun locations, whether it has been modified recently, whether it is located in a privileged area, and whether it lacks a digital signature. Secure signature updates include verification of the signature, hash, and version number of the rule set. The result of the work is a structural diagram of the prototype, a fragment of a YARA rule, and an experimental evaluation scheme focused on comparing full and priority-based scanning.