.png){kind=icon}
Return
A fast malware detection algorithm based on objective-oriented association mining
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2013.08.008.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Objective-oriented association (OOA) mining has been successfully applied in malware detection. One problem of OOA mining is that the number of association rules is very large, and many of the rules are redundant and have little capacity to distinguish malware from benign files. This circumstance seriously affects the running speed of OOA for malware detection. In this paper, an API (Application Programming Interface)-based association mining method is proposed for detecting malware. To increase the detection speed of the OOA, different strategies are presented: to improve the rule quality, criteria for API selection are proposed to remove APIs that cannot become frequent items; to find association rules that have strong discrimination power, we define the rule utility to evaluate the association rules; and to improve the detection accuracy, a classification method based on multiple association rules is adopted. The experiments show that the proposed strategies can significantly improve the running speed of OOA. In our experiments the time cost for data mining is reduced by thirty-two percent, and the time cost for classification is reduced by fifty percent. (C) 2013 Elsevier Ltd. All rights reserved.
Keywords:
Malware detection
Objective-oriented associate mining
Security
Classification
Machine learning
Journal
C
IF:
5.4
Papers:
4.6K
Citations:
1.4W
Organization
Cited Papers
ShareSaveParameter Identification of Battery Model Based on Forgetting Factor Recursive Least Square Method
PREAI
ShareSaveShareSaveHost-based intrusion detection using dynamic and static behavioral models.png)
PATTERN RECOGNITION
OAAI
PATTERN RECOGNITIONIF7.6
OAAIShareSaveShareSave no more
no more