.png){kind=icon}
返回
Malware detection on windows audit logs using LSTMs
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2021.102389.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Malware is a constant threat and is continuously evolving. Security systems try to keep up with the constant change. One challenge that arises is the large amount of logs generated on an operating system and the need to clarify which information contributes to the detec-tion of possible malware. This work aims at the detection of malware using neural networks based on Windows audit log events. Neural networks can only process continuous data, but Windows audit logs are sequential and textual data. To address these challenges, we ex-tract features out of the audit log events and use LSTMs to capture sequential effects. We create different subsets of features and analyze the effects of additional information. Fea-tures describe for example the action-type of windows audit log events, process names or target files that are accessed. Textual features are represented either as one-hot encoding or embedding representation, for which we compare three different approaches for represen-tation leaming. Effects of different feature subsets and representations are evaluated on a publicly available data set. Results indicate that using additional information improves the performance of the LSTM-model. While different representations lead to similar classifica-tion results, analysis of the latent space shows differences more precisely where FastText seems to be the most promising representation. (c) 2021 Elsevier Ltd. All rights reserved.
Keyword:
Malware
LSTM
Embeddings
Windows audit logs
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
.png){kind=icon}
Semantics-Based Online Malware Detection: Towards Efficient Real-Time Protection Against Malware
PREAI
分享收藏A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection网络安全入侵检测的数据挖掘和机器学习方法综述
PREAI
分享收藏 没有更多内容
没有更多内容