.png){kind=icon}
返回
A fast malware detection algorithm based on objective-oriented association mining
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2013.08.008.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Objective-oriented association (OOA) mining has been successfully applied in malware detection. One problem of OOA mining is that the number of association rules is very large, and many of the rules are redundant and have little capacity to distinguish malware from benign files. This circumstance seriously affects the running speed of OOA for malware detection. In this paper, an API (Application Programming Interface)-based association mining method is proposed for detecting malware. To increase the detection speed of the OOA, different strategies are presented: to improve the rule quality, criteria for API selection are proposed to remove APIs that cannot become frequent items; to find association rules that have strong discrimination power, we define the rule utility to evaluate the association rules; and to improve the detection accuracy, a classification method based on multiple association rules is adopted. The experiments show that the proposed strategies can significantly improve the running speed of OOA. In our experiments the time cost for data mining is reduced by thirty-two percent, and the time cost for classification is reduced by fifty percent. (C) 2013 Elsevier Ltd. All rights reserved.
Keyword:
Malware detection
Objective-oriented associate mining
Security
Classification
Machine learning
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Parameter Identification of Battery Model Based on Forgetting Factor Recursive Least Square Method
PREAI
分享收藏Host-based intrusion detection using dynamic and static behavioral models.png)
PATTERN RECOGNITION
OAAI
PATTERN RECOGNITIONIF7.6
OAAI分享收藏 没有更多内容
没有更多内容