A novel approach to malicious executables detection and containment based on distributed system architecture

Proceedings - 4th International Conference on Natural Computation, ICNC 2008

Volumn 5, Issue , 2008, Pages 160-164

  Zni, Liu ^a   Xiaosong, Zhang ^a  

^a UNIVERSITY OF ELECTRONIC SCIENCE AND TECHNOLOGY OF CHINA   (China)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFIERS; COMPUTER CRIME; DATA MINING; INFORMATION MANAGEMENT; LEARNING SYSTEMS;

AUDIT DATUMS; AUTOMATED FASHIONS; BEHAVIORAL FEATURES; DATA MINING TECHNIQUES; DISTRIBUTED SYSTEM ARCHITECTURES; EXECUTABLES; HIGH ACCURACIES; HOST LEVELS; LOW OVERHEADS; MALICIOUS EXECUTABLES; MALWARE; MANUAL ANALYSIS; OPTIMIZE EFFICIENCIES; VIRTUALIZED ENVIRONMENTS;

COMPUTER VIRUSES;

EID: 57649195950     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNC.2008.648     Document Type: Conference Paper

References (9)

1. G McGraw, G Morrisett, "Attacking malicious code: a report to the Infosec Research Council", IEEE Software, Volume17, Issue5, Sep., 2000, p 33-41.
2. W.Lee, STOLFO, S.J., Mok, K. "A data mining framework for building intrusion detection models", In Proceedings of the 1999 IEEE Symposium On Security and Privacy,Oakland,California, May,1999, p 120-132.
3. D. Wagner and P. Soto. Mimicry attacks on host based intrusion detection systems. In 9th ACM Conference on Computer and Communications Security (CCS), Washing-ton, DC, November 2002
4. Biswanath Mukherjee, Todd L. Heberlein, and Karl N.Levitt. Network intrusion detection. IEEE Network, Volume 8, Issue3, May-June, 1994, p 26-41.
5. VX-HEAVENS: http://vx.netlux.org.
6. S.A. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security (JCS), Volume 6, Issue3, 1998, p 151 - 180.
7. R. Sekar, M. Bendre, D. Dhurjati, and P. Bollineni. A fast automaton-based method for detecting anomalous program behaviors. In IEEE Symposium on Security and Privacy, 2001.
8. http://www.vmware.com.
9. http://www.microsoft.com/whdc/driver/filterdrv/default.mspx