Feature based techniques for auto-detection of novel email worms

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4426 LNAI, Issue , 2007, Pages 205-216

  Masud, Mohammad M ^a   Khan, Latifur ^a   Thuraisingham, Bhavani ^a  

^a The University of Texas at Dallas   (United States)

Author keywords

Classification technique; Data mining; Email worm; Feature selection; Principal component analysis

Indexed keywords

DATA MINING; DATA REDUCTION; DATA STRUCTURES; ELECTRONIC MAIL; FEATURE EXTRACTION; PRINCIPAL COMPONENT ANALYSIS;

CLASSIFICATION TECHNIQUE; DETECTION TECHNIQUE;

COMPUTER WORMS;

EID: 38049178750     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-71701-0_22     Document Type: Conference Paper

References (17)

1. Martin, S., Sewani, A., Nelson, B., Chen, K., Joseph, A.D. A Two-Layer Approach for Novel Email Worm Detection. Submitted to USENIX SRUTI (Steps on Reducing Unwanted Traffic on the Internet) 2005.
2. WEKA: Data Mining Software in Java, http://www.cs.waikato.ac.nz/~ml/weka/
3. Quinlan, J. R. C4.5: Programs for Machine Learning. Morgan Kaufmann Publishers, 1993.
4. Golbeck, J., and Hendler, J. Reputation network analysis for email filtering. In CEAS (2004).
5. Newman, M. E. J., Forrest, S., and Balthrop, J. Email networks and the spread of computer viruses. Physical Review E 66, 035101 (2002).
6. Symantec Corporation. W32.Beagle.BG. Online, 2005. http://www.sarc.com/ avcenter/venc/data/w32.beagle.bg@mm.html.
7. Schultz, M., Eskin, E., and Zadok, E. MEF: Malicious email filter, a UNIX mail filter that detects malicious windows executables. In USENIX Annual Technical Conference FREENIX Track (June 2001).
8. Singh, S., Estan, C., Varghese, G., and Savage, S. The EarlyBird System for Real-time Detection of Unknown Worms. Technical report - cs2003-0761, UCSD, 2003.
9. Kim, H.-A. and Karp, B., Autograph: Toward Automated, Distributed Worm Signature Detection, in the Proceedings of the 13th Usenix Security Symposium (Security 2004), San Diego, CA, August, 2004.
10. J. Newsome, B. Karp, and D. Song. Polygraph: Automatically Generating Signatures for Polymorphic Worms. In Proceedings of the IEEE Symposium on Security and Privacy, May 2005.
11. Honeypot. http://www.honeypots.net/.
12. Martin, S., Sewani, A., Nelson, B., Chen, K., Joseph, A.D. Analyzing Behavioral Features for Email Classification, In the Proceedings of the IEEE Second Conference on Email and Anti-Spam (CEAS 2005), July 21 & 22, 2005, Stanford University.
13. Sidiroglou, S., Ioannidis, J., Keromytis, A.D., Stolfo, S.J. An Email Worm Vaccine Architecture. Proceedings of the First International Conference on Information Security Practice and Experience (ISPEC 2005), Singapore, April 11-14, 2005: 97-108
14. Mitchell, T. Machine Learning. McGraw Hill, 1997.
15. John, G.H., Langley, P.: Estimating Continuous Distributions in Bayesian Classifiers. In the Proceedings of the Eleventh Conference on Uncertainty in Artificial Intelligence, Morgan KaufMann Publishers, San Mateo, (1995) 338-345.
16. Boser, B. E., Guyon, I. M. and Vapnik, V. N. A training algorithm for optimal margin classifiers. In D. Haussler, editor, 5th Annual ACM Workshop on COLT, pages 144-152, Pittsburgh, PA, 1992. ACM Press.
17. A library for Support Vector Machine: http://www.csie.ntu.edu.tw/~cjlin/ libsvm/