.png){kind=icon}
返回
Minimal contrast frequent pattern mining for malware detection
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2016.06.004.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Currently, most of widely-used malware detection software products utilize signature based algorithms to recognize threats. However, this approach is problematic because it relies on file hashes and byte (or instruction) signatures. Consequently, obfuscation techniques are straightforward ways to modify these features syntactically and evade detection. Since it is harder for an attacker to radically change the behavior of a malware than to morph its syntactic structure, behavior-based detection techniques are a promising solution to this problem. However behavior-based techniques can be applied using static analysis or dynamic analysis or hybrid analysis. While dynamic behavior -based detection methods are time consuming and fail to obtain all possible malicious execution traces, most of static behavior based approaches suffer from a high growth rate in the number of behavioral signatures and suffer from high false positive rates. In this paper, we present a new graph mining method to detect variants of malware using static analysis, while covering the existing defects. We propose a novel algorithm, called minimal contrast frequent subgraph miner algorithm (MCFSM), for extracting minimal discriminative and widely employed malicious behavioral patterns which can identify precisely an entire family of malicious programs, in contrast to another set of benign programs. The proposed method shows high detection rates and low false positive rates and generates a limited number of behavioral malware signatures. (C) 2016 Elsevier Ltd. All rights reserved.
Keyword:
Malware detection
Static analysis
Code obfuscation
Code graph
Subgraph isomorphism
Minimal contrast frequent subgraph mining
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Nanocapsules Loaded with Iron-Saturated Bovine Lactoferrin have Antimicrobial Therapeutic Potential and Maintain Calcium, Zinc and Iron Metabolism.png)
Nanomedicine
OAAI
NanomedicineIF0
OAAI分享收藏A framework for metamorphic malware analysis and real-time detection变形恶意软件分析和实时检测框架COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容