返回
Security importance assessment for system objects and malware detection
DOI:10.1016/j.cose.2017.02.009.png)
摘要
En 中文
System objects play different roles in computer systems and exhibit different levels of importance to system security. Assessing the importance of system objects helps us develop effective security protection methods. However, little work has focused on understanding and assessing the importance of system objects from a security perspective. In this paper, we build a security dependency network from access behaviors to quantify the security importance of system objects from a system-wide perspective. Similar to other networked systems, we observe small-world effect and power-law distributions for in and out-degree in the security dependency network. Exploring rich network structures in the security dependency network provides insights into the importance of system objects in security. We assess the importance of system objects, with respect to security, by the centrality metrics and propose an importance based model for malware detection. We evaluate importance metrics of system objects from various perspectives to demonstrate their feasibility and practicality. Furthermore, extensive experimental results on a real-world dataset demonstrate that our model is capable of detecting 7257 malware samples from 27,840 benign processes with a 93.92% true positive rate at 0.1% false positive rate. (C) 2017 Elsevier Ltd. All rights reserved.
Keyword:
Importance metric
Access behavior
Security dependency network
Malware detection
Behavioral-based detection
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
VESICULAR STOMATITIS VIRUS-MEDIATED CELL FUSION SUBSEQUENT TO VIRUS ADSORPTION AT DIFFRENT pH VALUES
Efficacy of lanthionine-stabilized angiotensin-(1-7) in type I and type II diabetes mouse models
Peptides
IF0

