arrow
返回

Control flow-based opcode behavior analysis for Malware detection

delete2014-07-01
delete70
PRE
AI
Y
Yuxin Ding *
W
Wei Dai
S
Shengli Yan
DOI:10.1016/j.cose.2014.04.003delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Opcode sequences from decompiled executables have been employed to detect malware. Currently, opcode sequences are extracted using text-based methods, and the limitation of this method is that the extracted opcode sequences cannot represent the true behaviors of an executable. To solve this issue, we present a control flow-based method to extract executable opcode behaviors. The behaviors extracted by this method can fully represent the behavior characteristics of an executable. To verify the efficiency of control flow-based behaviors, we perform a comparative study of the two types of opcode behavior analysis methods. The experimental results indicate that the proposed control flow-based method has a higher overall accuracy and a lower false positive rate. (C) 2014 Elsevier Ltd. All rights reserved.
Keyword:
Opcode sequence
Malicious code detection
Control flow graph
Machine learning
Classification
Security

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

H
harbin institute of technology
学者数:
8.0W
论文数: 6.6W
被引数: 66
C
chinese academy of sciences
学者数:
56.7W
论文数: 45.0W
被引数: 704
引用论文

引用论文

Problems of scientific methodology related to placebo control in Qigong studies: A systematic review
err2020-10-01
err0
PREAI
errMário Gonçalves; Luís Carlos Matos; Leonel Duarte; Jorge Machado; Henry Johannes Greten; Giovanna Franconi
err分享
err收藏
A fast malware detection algorithm based on objective-oriented association mining
err2013-11-01
err39
PREAI
errDing, Yuxin; Yuan, Xuebing; Tang, Ke; Xiao, Xiao; Zhang, Yibin
err分享
err收藏
Allosteric Regulation in Phosphofructokinase from the Extreme Thermophile Thermus thermophilus
err2013-12-27
err0
errOAAI
errMaria S. McGresham; Michelle Lovingshimer; Gregory D. Reinhart
err分享
err收藏
err分享
err收藏
High-order Markov kernels for intrusion detection
err2008-10-01
err16
PREAI
errYin, Chuanhuan; Tian, Shengfeng; Mu, Shaomin
err分享
err收藏
Quest for highly porous metal–metalloporphyrin framework based upon a custom-designed octatopic porphyrin ligand
err2012-01-01
err0
PREAI
errXi-Sen Wang; Matthew Chrzanowski; Chungsik Kim; Wen-Yang Gao; Lukasz Wojtas; Yu-Sheng Chen; X. Peter Zhang; Shengqian Ma
err分享
err收藏
学者 查看更多内容