Unknown malcode detection using OPCODE representation

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5376 LNCS, Issue , 2008, Pages 204-215

  Moskovitch, Robert ^a   Feher, Clint ^a   Tzachar, Nir ^a   Berger, Eugene ^a   Gitelman, Marina ^a   Dolev, Shlomi ^a   Elovici, Yuval ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

Classification; Malicious code detection; OpCode

Indexed keywords

BINARY CODES; TEXT PROCESSING;

CLASSIFICATION; CLASSIFICATION ALGORITHMS; CLASSIFICATION PROCESS; EXECUTABLES; FILE CONTENTS; IMBALANCE PROBLEMS; IN NETWORKS; MALCODE DETECTIONS; MALICIOUS CODE DETECTION; MALICIOUS CODES; N-GRAMS; OPCODE; TEST COLLECTIONS; TEXT CATEGORIZATIONS; TRAINING SETS;

CODES (SYMBOLS);

EID: 58849157332     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-89900-6_21     Document Type: Conference Paper

References (18)

1. Moskovitch, R., Stopel, D., Feher, C., Nissim, N., Elovici, Y.: Unknown Malcode Detection via Text Categorization and the Imbalance Problem. In: IEEE Intelligence and Security Informatics, Taiwan (2008)
2. Gryaznov, D.: Scanners of the Year 2000: Heuritics. In: The 5th International Virus Bulletin (1999)
3. Shin, S., Jung, J., Balakrishnan, H.: Malware Prevalence in the KaZaA File-Sharing Network. In: Internet Measurement Conference (IMC), Brazil (October 2006)
4. Schultz, M., Eskin, E., Zadok, E., Stolfo, S.: Data mining methods for detection of new malicious executables. In: Proceedings of the IEEE Symposium on Security and Privacy (2001)
5. Abou-Assaleh, T., Cercone, N., Keselj, V., Sweidan, R.: N-gram Based Detection of New Malicious Code. In: Proceedings of the 28th Annual International Computer Software and Applications Conference, COMPSAC 2004 (2004)
6. Kolter, J.Z., Maloof, M.A.: Learning to detect malicious executables in the wild. In: Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 470-478. ACM Press, New York (2004)
7. Mitchell, T.: Machine Learning. McGraw-Hill, New York (1997)
8. Kolter, J., Maloof, M.: Learning to Detect and Classify Malicious Executables in the Wild. Journal of Machine Learning Research 7, 2721-2744 (2006)
9. Henchiri, O., Japkowicz, N.: A Feature Selection and Evaluation Scheme for Computer Virus Detection. In: Proceedings of ICDM 2006, Hong Kong, pp. 891-895 (2006)
10. Dolev, S., Tzachar, N.: Malware signature builder and detection for executable code, patent application
11. Chawla, N.V., Japkowicz, N., Kotcz, A.: Editorial: special issue on learning from unbalanced data sets. SIGKDD Explorations Newsletter 6(1), 1-6 (2004)
12. Saltan, G., Wong, A., Yang, C.S.: A vector space model for automatic indexing. Communications of the ACM 18, 613-620 (1975)
13. Golub, T., Slonim, D., Tamaya, P., Huard, C., Gaasenbeek, M., Mesirov, J., Coller, H., Loh, M., Downing, J., Caligiuri, M., Bloomfield, C., Lander, E.: Molecular classification of cancer: Class discovery and class prediction by gene expression monitoring. Science 286, 531-537 (1999)
14. Bishop, C.: Neural Networks for Pattern Recognition. Clarendon Press, Oxford (1995)
15. Quinlan, J.R.: C4.5: programs for machine learning. Morgan Kaufmann Publishers, Inc., San Francisco (1993)
16. Domingos, P., Pazzani, M.: On the optimality of simple Bayesian classifier under zero-one loss. Machine Learning 29, 103-130 (1997)
17. Freund, Y., Schapire, R.E.: A brief introduction to boosting. In: International Joint Conference on Artificial Intelligence (1999)
18. Witten, I.H., Frank, E.: Data Mining: Practical machine learning tools and techniques, 2nd edn. Morgan Kaufmann Publishers, Inc., San Francisco (2005)