关键词: 多态蠕虫, 内容过滤, 基于行为的检测, 语义分析

Abstract: As the improvement of network applications and complexity， Internet worms have become the threat to the security of the network. Recently， worms have new revolution that is polymorphic worms， which could use many metamorphic techniques to evade the detection of the existing IDSes. At present， the detection technologies of polymorphic worms have become the focus of the worm research. The structure of polymorphic worms is firstly presented， then some detection techniques in recent years are concluded and an analysis is given， and finally some problems and research trends in this area are proposed.

Key words: polymorphic worm, content-sifting, behavior-based detection, semantic analysis