Embedded malware detection using Markov n-Grams

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5137 LNCS, Issue , 2008, Pages 88-107

  Shafiq, M Zubair ^a   Khayam, Syed Ali ^b   Farooq, Muddassar ^a  

^a NATIONAL UNIVERSITY OF COMPUTER AND EMERGING SCIENCES   (Pakistan)

^b NATIONAL UNIVERSITY OF SCIENCES AND TECHNOLOGY NUST   (Pakistan)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); IMAGE SEGMENTATION; INFORMATION THEORY; MARKOV PROCESSES; SECURITY OF DATA; SIGNAL THEORY;

ANOMALY DETECTIONS; ANTI-VIRUS; ANTI-VIRUS SOFTWARE; CONDITIONAL DISTRIBUTIONS; CORRELATION STRUCTURES; DATA SETS; DEPENDENCE STRUCTURE; ENTROPY RATES; FALSE POSITIVE RATES; INTERNATIONAL CONFERENCES; MALCODE; MALWARE; MALWARE DETECTION; N-GRAMS; SECURITY THREATS; STATISTICAL PROPERTIES; VULNERABILITY ASSESSMENTS;

COMPUTER CRIME;

EID: 49949094798     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-70542-0_5     Document Type: Conference Paper

References (17)

1. Symantec Internet Security Threat Report XI: Trends for July December 2007 (September 2007)
2. Stolfo, S.J., Wang, K., Li, W.J.: Towards Stealthy Maiware Detection. Advances in Information Security, vol. 27, pp. 231-249. Springer, Heidelberg (2007)
3. Li, W.J., Stolfo, S.J., Stavrou, A., Androulaki, E., Keromytis, A.D.: A Study of Malcode-Bearing Documents. In: Hämmerli, B.M., Sommer, R. (eds.) DIMVA 2007. LNCS, vol. 4579. Springer, Heidelberg (2007)
4. Leyden, J.: Trojan exploits unpatchedWord vulnerability. The Register (May 2006)
5. Evers, J.: Zero-day attacks continue to hit Microsoft. News.com (September 2006)
6. Kierznowski, D.: Backdooring PDF Files (September 2006)
7. Damashek, M.: Gauging Similarity with n-Grams: Language-Independent Categorization of Text. Science 267, 842-848 (1995)
8. Friedl, S.: Steve Friedl's Unixwiz.net Tech Tips: Analysis of the new 'Code Red II' Variant, http://www.unixwiz.net/techtips/CodeRedII.html
9. Lakhina, A., Crovella, M., Diot, C.: Mining anomalies using traffic feature distributions. ACM SIGCOMM (September 2005)
10. Cover, T.M., Thomas, J.A.: Elements of Information Theory. Wiley-Interscience, Chichester (1991)
11. VX Heavens Virus Collection, VX Heavens, http://vx.netlux.org/vl.php
12. McAfee Anti-virus and Internet security, McAfee, CA
13. Kaspersky Antivirus, Kaspersky Lab HQ, Moscow, Russia
14. AVG Anti-Virus and Internet Security, GRISOFT Inc., FL, USA
15. Huang, Y.: Vulnerabilities in Portable Executable (PE) File Format For Win32 Architecture, TR, Exurity Inc., Canada (2006)
16. Fawcett, T.: ROC Graphs: Notes and Practical Considerations for Researchers, TR, HP Labs, CA, USA (2003-2004)
17. Wagner, D., Soto, P.: Mimicry Attacks on Host-Based Intrusion Detection Systems. ACM CCS (November 2002)