.png){kind=icon}
返回
MalSPM: Metamorphic malware behavior analysis and classification using sequential pattern mining
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.102741.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Malware pose a serious threat to the computers of individuals, enterprises and other organizations. In the Windows operating system (OS), Application Programming Interface (API) calls are an attractive and distinguishable feature for malware analysis and detection as they can properly reflect the actions of portable executable (PE) files. In this paper, we propose MalSPM, an intelligent malware detection system based on sequential pattern mining (SPM) for the analysis and classification of malware behavior during executions. A dataset that contains sequences of API calls made by different malware on Windows OS is abstracted into a suitable format. SPM algorithms are first used on the corpus to find frequent API calls and their patterns. Moreover, sequential rules between API calls patterns as well as maximal and closed frequent API calls patterns are discovered. Obtained frequent patterns are then used for the classification of different malware. Seven classifiers are used and their performance is compared by using various metrics. Moreover, the performance of MalSPM is compared with existing state-of-the-art malware detection approaches and obtained results show that MalSPM outperforms these approaches.(c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Malware
API calls
Sequential pattern mining
Frequent patterns
Classification
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Review of Android Malware Detection Based on Deep Learning基于深度学习的Android恶意软件检测综述.png)
IEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏Improvement of malware detection and classification using API call sequence alignment and visualization使用API调用序列比对和可视化改进恶意软件检测和分类
PREAI
分享收藏
Nanocapsules Loaded with Iron-Saturated Bovine Lactoferrin have Antimicrobial Therapeutic Potential and Maintain Calcium, Zinc and Iron MetabolismNanomedicineOAAI
NanomedicineIF0
OAAI分享收藏Auditing static machine learning anti-Malware tools against metamorphic attacksCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏A novel malware classification and augmentation model based on convolutional neural networkCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容