.png){kind=icon}
返回
Effective One-Class Classifier Model for Memory Dump Malware Detection
.png){kind=icon}
OA
AI
DOI：10.3390/jsan12010005.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Malware complexity is rapidly increasing, causing catastrophic impacts on computer systems. Memory dump malware is gaining increased attention due to its ability to expose plaintext passwords or key encryption files. This paper presents an enhanced classification model based on One class SVM (OCSVM) classifier that can identify any deviation from the normal memory dump file patterns and detect it as malware. The proposed model integrates OCSVM and Principal Component Analysis (PCA) for increased model sensitivity and efficiency. An up-to-date dataset known as MALMEMANALYSIS-2022 was utilized during the evaluation phase of this study. The accuracy achieved by the traditional one-class classification (TOCC) model was 55%, compared to 99.4% in the one-class classification with the PCA (OCC-PCA) model. Such results have confirmed the improved performance achieved by the proposed model.
Keyword:
Novelty-class
One-class SVM (OCSVM)
Memory dump
Malware
Principal Component Analysis (PCA)
Dimensionality Reduction
期刊
IF:
4.2
论文数:
618
被引数:
1.6K
机构
引用论文
分享收藏Towards Model Generalization for Intrusion Detection: Unsupervised Machine Learning Techniques面向入侵检测的模型泛化: 无监督机器学习技术
OAAI
OAAI分享收藏A comparative evaluation of outlier detection algorithms: Experiments and analyses.png)
PATTERN RECOGNITION
PATTERN RECOGNITIONIF7.6
PREAI
分享收藏Echocardiographic Studies on the Relationship between Atrial Fibrillation and Atrial Enlargement in Patients with Hyperthyroidism of Graves’ DiseaseCardiology
CardiologyIF0
PREAI
分享收藏
查看更多内容