An identification method on unknown malicious code based on the good or Evil index of API

This paper puts forward a algorithm based on the good or evil index of API(AGEI) to identify unknown malicious code, it can judge whether the code is malicious or not by a judgement threshold based on the degree of good or evil related API which is catched when the code execute. The experiments result shows that the proposed identification method achieves a good effect on unknown malicious code detection.