An ensemble framework for interpretable malicious code detection

doi:10.1002/int.22310

An ensemble framework for interpretable malicious code detection

2020-10-13

11

OA

AI

DOI：10.1002/int.22310

Original

Save

View PDF

Abstract

En 中文

Malicious code is an ever-growing security threats to computer systems and networks, while malware detection provides effective defense against malicious codes. In this paper, a brief overview is presented on currently prevalent methods to detect malicious codes, including signature-based methods, behavioral-based detection and machine learning (ML) based ones. More specifically, the potentially effective malicious features are summarized and the novel methods using ML are deeply discussed. Furthermore, an ensemble interpretable framework is explored for automatic and efficient malicious code detection. Based on the knowledge graph of malware, the novel framework inclines to achieve robust malware detection even confronted with unseen malicious codes. Finally, both advantages and disadvantages are discussed and experimental results are outlined to verify the effectiveness of the novel methods.

Keywords:

feature extraction

knowledge graph

machine learning

malicious code

malware detection

An ensemble framework for interpretable malicious code detection

Abstract

AI Summary

Journal

Organization