Improving malware detection by applying multi-inducer ensemble

Computational Statistics and Data Analysis

Volumn 53, Issue 4, 2009, Pages 1483-1494

  Menahem, Eitan ^a   Shabtai, Asaf ^a   Rokach, Lior ^a   Elovici, Yuval ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFIERS; DECISION THEORY; DECISION TREES; LEARNING SYSTEMS;

DATA-SETS; DETECTION ACCURACY; ENSEMB LE METHODS; EXECUTION TIME; INDIVIDUAL CLASSIFIERS; INDUCTION ALGORITHMS; MACHINE LEARNING METHODS; MALWARE; MALWARE DETECTION;

COMPUTER CRIME;

EID: 58549090885     PISSN: 01679473     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csda.2008.10.015     Document Type: Article

References (35)

1. Abou-Assaleh, T., Cercone, N., Keselj, V., Sweidan, R., 2004. N-gram based detection of new malicious code. In: Proc. of the Annual International Computer Software and Applications Conference, COMPSAC'04
2. Buntine, W., 1990. A theory of learning classification rules. Doctoral Dissertation. School of Computing Science, University of Technology, Sydney
3. Caia D.M., Gokhaleb M., and Theilerc J. Comparison of feature selection and classification algorithms in identifying malicious executables. Computational Statistics and Data Analysis 51 (2007) 3156-3172
4. Clark, P., Boswell, R., 1991. Rule induction with CN2: Some recent improvements. In: Proc. of the European Working Session on Learning, pp. 151-163
5. Demsar J. Statistical comparisons of classifiers over multiple data sets. Journal of Machine Learning Research 7 (2006) 1-30
6. Dikinson, J., 2005. The new anti-virus formula. http://www.solunet.com/wp/security/How-to-use-multrd-security.pdf
7. Dzeroski S., and Zenko B. Is combining classifiers with stacking better than selecting the best one?. Machine Learning 54 3 (2004) 255-273
8. Golub T., et al. Molecular classification of cancer: Class discovery and class prediction by gene expression monitoring. Science 286 (1999) 531-537
9. Guvenir, G.D., 1997. Classification by voting feature intervals. In: Proc. of the European Conference on Machine Learning, pp. 85-92
10. Heidari, M., 2004. Malicious codes in depth. http://www.securitydocs.com/pdf/2742.pdf
11. Holte R. Very simple classification rules perform well on most commonly used datasets. Machine Learning 11 (1993) 63-91
12. John, G.H., Langley, P., 1995. Estimating continuous distributions in Bayesian classifiers. In: Proc. of the Conference on Uncertainty in Artificial Intelligence, San Mateo, pp. 338-345
13. Kabiri P., and Ghorbani A.A. Research on intrusion detection and response: A survey. International Journal of Network Security 1 2 (2005) 84-102
14. Kelly, C., Spears, D., Karlsson, C., Polyakov, P., 2006. An ensemble of anomaly classifiers for identifying cyber attacks. In: Proc. of the International SIAM Workshop on Feature Selection for Data Mining
15. Kibler D.A. Instance-based learning algorithms. Machine Learning (1991) 37-66
16. Kienzle, D.M., Elder, M.C., 2003. Internet WORMS: Past, present, and future: Recent worms: A survey and trends. In: ACM Workshop on Rapid Malcode (WORM03)
17. Kittler J., Hatef M., Duin R., and Matas J. On combining classifiers. IEEE Transactions on Pattern Analysis and Machine Intelligence 20 3 (1998) 226-239
18. Kolter J., and Maloof M. Learning to detect and classify malicious executables in the wild. Journal of Machine Learning Research 7 (2006) 2721-2744
19. Kuncheva L.I. Diversity in multiple classifier systems (editorial). Information Fusion 6 1 (2005) 3-4
20. Mahoney, M.V., 2003. A machine learning approach to detecting attacks by identifying anomalies in network traffic. Ph.D. Dissertation, Florida Tech.
21. Menahem, E., 2008. Troika - An improved stacking schema for classification tasks. M.Sc. Thesis in Information System Engineering dep., Ben-Gurion University of the Negev, Israel
22. Mitchell T. Machine Learning (1997), McGraw-Hill
23. Moskovitch R., Elovici Y., and Rokach L. Detection of unknown computer worms based on behavioral classification of the host. Computational Statistics and Data Analysis 52 9 (2008) 4544-4566
24. Mukkamalaa S., Sunga A.H., and Abrahamb A. Intrusion detection using an ensemble of intelligent paradigms. Journal of Network and Computer Applications 28 (2005) 167-182
25. Opitz D., and Shavlik J. Generating accurate and diverse members of a neural network ensemble. Advances in Neural Information Processing Systems 8 (1996) 535-541
26. Quinlan R. C4.5: Programs for Machine Learning (1993), Morgan Kaufmann Publishers
27. Schultz, M., Eskin, E., Zadok, E., Stolfo, S., 2001. Data mining methods for detection of new malicious executables. In: Proc. of the IEEE Symposium on Security and Privacy, pp. 178-184
28. Seewald, A.K., 2003. Towards understanding stacking - Studies of a general ensemble learning scheme. Ph.D. Thesis, TU Wien
29. Tumer K., and Ghosh J. Error correlation and error reduction in ensemble classifiers. Connection Science 8 (1996) 385-404
30. Wang, K., Stolfo, S.J., 2004. Anomalous payload-based network intrusion detection. In: Proc. of International Symposium on Recent Advances in Intrusion Detection, RAID, pp. 1-12
31. White, S., 1998. Open problems in computer virus research. IBM Research Center
32. White, S., 1999. Anatomy of a commercial-grade immune system. IBM Research Center
33. Witten I.H., and Frank E. Data Mining: Practical Machine Learning Tools and Techniques. 2nd edition (2005), Morgan Kaufmann, San Francisco Retrieved on 2007-06-25
34. Wolpert D.H. Stacked generalization. Neural Networks 5 (1992) 241-259
35. Zhang B., Yin J., Hao J., Zhang D., and Wang S. Malicious codes detection based on ensemble learning. Autonomic and Trusted Computing (2007) 277-468