arrow
Return

Control flow-based opcode behavior analysis for Malware detection

delete2014-07-01
delete70
PRE
AI
Y
Yuxin Ding *
W
Wei Dai
S
Shengli Yan
DOI:10.1016/j.cose.2014.04.003delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Opcode sequences from decompiled executables have been employed to detect malware. Currently, opcode sequences are extracted using text-based methods, and the limitation of this method is that the extracted opcode sequences cannot represent the true behaviors of an executable. To solve this issue, we present a control flow-based method to extract executable opcode behaviors. The behaviors extracted by this method can fully represent the behavior characteristics of an executable. To verify the efficiency of control flow-based behaviors, we perform a comparative study of the two types of opcode behavior analysis methods. The experimental results indicate that the proposed control flow-based method has a higher overall accuracy and a lower false positive rate. (C) 2014 Elsevier Ltd. All rights reserved.
Keywords:
Opcode sequence
Malicious code detection
Control flow graph
Machine learning
Classification
Security

Journal

C
Computers and Security
IF:
5.4
Papers:
4.6K
Citations:
1.4W

Organization

H
harbin institute of technology
Scholars:
8.0W
Papers: 6.6W
Citations: 66
C
chinese academy of sciences
Scholars:
56.7W
Papers: 45.0W
Citations: 704
Cited Papers

Cited Papers

Problems of scientific methodology related to placebo control in Qigong studies: A systematic review
err2020-10-01
err0
PREAI
errMário Gonçalves; Luís Carlos Matos; Leonel Duarte; Jorge Machado; Henry Johannes Greten; Giovanna Franconi
errShare
errSave
A fast malware detection algorithm based on objective-oriented association mining
err2013-11-01
err39
PREAI
errDing, Yuxin; Yuan, Xuebing; Tang, Ke; Xiao, Xiao; Zhang, Yibin
errShare
errSave
Allosteric Regulation in Phosphofructokinase from the Extreme Thermophile Thermus thermophilus
err2013-12-27
err0
errOAAI
errMaria S. McGresham; Michelle Lovingshimer; Gregory D. Reinhart
errShare
errSave
errShare
errSave
High-order Markov kernels for intrusion detection
err2008-10-01
err16
PREAI
errYin, Chuanhuan; Tian, Shengfeng; Mu, Shaomin
errShare
errSave
Quest for highly porous metal–metalloporphyrin framework based upon a custom-designed octatopic porphyrin ligand
err2012-01-01
err0
PREAI
errXi-Sen Wang; Matthew Chrzanowski; Chungsik Kim; Wen-Yang Gao; Lukasz Wojtas; Yu-Sheng Chen; X. Peter Zhang; Shengqian Ma
errShare
errSave
researcher View more