Behavioral Malware Detection by Data Mining - Couverture souple

Ninyesiga, Allan; Ngubiri, John

Couverture souple

ISBN 10 : 6139923069 ISBN 13 : 9786139923069

Editeur : LAP LAMBERT Academic Publishing, 2018

Synopsis

Malware cases are increasing both in numbers and fatality. Hackers design malware to compromise systems security mostly confidentiality, integrity, and availability. Malware elimination techniques exist but the malware must be detected first. Malware detection techniques still have weaknesses of high false positive/negatives rates. The emergency of polymorphic malware has made the situation worse. Recent studies have shown data mining to be promising in identifying malware by analyzing API calls. However, in this approach, a file is detected as malicious or not. It is not classified on to which malware class it belongs. This makes its elimination harder as elimination schemes are mostly class based. Classification as a post detection process is important if the malware is to be eliminated from the system. We experiment on the use of data mining approach to classify malware using 4-gram API system calls. We use Windows Portable Executables (PE) with their corresponding API calls. Using the Cuckoo sandbox. Relevant 4-gram API call features are extracted using Term Frequency-Inverse Document Frequency(TF-IDF). Machine Learning algorithms are then applied to classify the malware.

Détails de l'édition

• Éditeur: LAP LAMBERT Academic Publishing
• Date d'édition: 2018
• Langue: anglais
• ISBN 10: 6139923069
• ISBN 13: 9786139923069
• Reliure: Broché
• Nombre de pages: 96
• Coordonnées du fabricant: non disponible
• Personne responsable: KreGa Onlinehandel GmbH; 4950000000000; info@krega-onlinehandel.de; ; Birkenweg 31; Brakel; 33034; Allemagne