Return
Packer classification based on association rule mining
DOI:10.1016/j.asoc.2022.109373.png)
Abstract
En 中文
Detecting packer programs is a key step in the defense against malicious programs and plays a key role in cyber security defenses. One challenge with packer classification is that many features have been used and their individual significance is unknown. An effective approach for building classifiers without requiring prior knowledge of feature significance is to use associative classification (AC) algorithms, which combine association rules and classification. This work considers many different AC algorithms for the challenge of packer detection. Novel variations of many of these algorithms are also developed to address challenges related to having many features of varying types. The effectiveness of the classifiers produced by these algorithms is evaluated, including over time as packers and malware evolve. (C) 2022 Elsevier B.V. All rights reserved.
Keywords:
Malware
Packer detection
Pattern mining
Association rules
Associative classification
Journal
IF:
6.6
Papers:
1.4W
Citations:
4.8W
Organization
Cited Papers
FleBiC: Learning classifiers from high-dimensional biomedical data using discriminative biclusters with non-constant patterns
PATTERN RECOGNITION
IF7.6

