Abstract: The behavior based security has become main-stream in the research of malware detection techniques．Although there have been some behavior based malware detection methods introduced in public papers,they are prone to suffer from mimicry attack or shadow attack．Towards these problems,a novel technique using predicate temporal logic to describe malware behavior was proposed in this paper．A variety of relations among system function calls,such as logic combination,precedence,parameter decencies and subject-object associations,can be depicted by one logic formula,therefore our method can describe malware behavior more subtlety and accurately．An algorithm of detecting malware behavior based on the logic was given and its feasibility was justified through real example test.

Key words: Behavior,Logic,Malware