Malware detection using adaptive data compression

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 53-59

  Zhou, Yan ^a   Inge, Meador ^a  

^a University of South Alabama   (United States)

Author keywords

Machine learning; Malware detection; Statistical data compression

Indexed keywords

ANTI-MALWARE; BIT PATTERNS; COMPRESSION MODEL; CROSS ENTROPY; FALSE POSITIVE RATES; LEARNING ENGINE; MACHINE LEARNING; MALICIOUS CODES; MALWARE DETECTION; MALWARES; PREDICTION BY PARTIAL MATCHING; SIGNATURE-MATCHING; STATISTICAL DATA COMPRESSION; THROUGH SIGNATURE; TRUE POSITIVE RATES;

COMPUTER CRIME; EDUCATION; ROBOT LEARNING; SECURITY OF DATA;

DATA COMPRESSION;

EID: 70349232273     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1456377.1456393     Document Type: Conference Paper

References (18)

1. A. Bratko, G. Cormack, B. Filipič, T. Lynam, and B. Zupan. Spam filtering using statistical data compression models. Journal of Machine Learning Research (JMLR), 7:2673-2698, December 2006.
2. M. Christodorescu, S. Jha, J. Kinder, S. Katzenbeisser, and H. Veith. Software transformations to improve malware detection. Journal in Computer Virology, 3:253-265, 2007.
3. J. Cleary and I. Witten. Data compression using adaptive coding and partial string matching. IEEE Transactions on Communications, COM-32(4):396-402, 1984.
4. J. Cleary and I. Witten. Unbounded length contexts of ppm. The computer Journal, 40(2/3):67-75, 1997.
5. G. Cormack and R. Horspool. Data compression using dynamic markov modeling. The Computer Journal, 30(6):541-550, 1987.
6. M. Drinic, D. Kirovski, and M. Potkonjak. Ppm model cleaning. In DCC '03: Proceedings of the Conference on Data Compression, page 163, Washington, DC, USA, 2003. IEEE Computer Society.
7. E. Frank, C. Chui, and I. Witten. Text categorization using compression models. In IEEE Data Compression Conference (DCC-00), pages 200-209. IEEE CS Press, 2000.
8. Z. Jorgensen, Y. Zhou, and M. Inge. A multiple instance learning strategy for combating good word attacks on spam filters. Journal of Machine Learning Research (JMLR), 9:1115-1146, June 2008.
9. S. Josse. Secure and advanced unpacking using computer emulation. Journal in Computer Virology, 3:221-236, 2007.
10. J. Kephart, G. Sorkin, W. Arnold, D. Cheese, G. Tesauro, and S. White. Biologically inspired defenses against computer viruses. In Proceedings of the 14th International Joint Conference on Artificial Intelligence (IJCAI95), pages 985-996. Morgan Kaufman, 1995.
11. J. Z. Kolter and M. A. Maloof. Learning to detect and classify malicious executables in the wild. Journal of Machine Learning Research, 7:2721-2744, 2006.
12. C. Nachenberg. Us patent no. 5,826,013: Polymorphic virus detection module, 1998.
13. P. Royal, M. Halpin, D. Dagon, R. Edmonds, and W. Lee. Polyunpack: Automating the hidden-code extraction of unpack-executing malware. In ACSAC '06: Proceedings of the 22nd Annual Computer Security Applications Conference on Annual Computer Security Applications Conference, pages 289-300, Washington, DC, USA, 2006. IEEE Computer Society.
14. M. Schultz, E. Eskin, E. Zadok, and S. Stolfo. Data mining methods for detection of new malicious executables. In Proceedings of the IEEE Symposium on Security and Privacy, pages 38-49, Los Alamitos, CA, 2001. IEEE Press.
15. S. K. Udupa, S. K. Debray, and M. Madou. Deobfuscation: Reverse engineering obfuscated code. In WCRE '05: Proceedings of the 12th Working Conference on Reverse Engineering, pages 45-54, Washington, DC, USA, 2005. IEEE Computer Society.
16. I. Witten. Applications of lossless compression in adaptive text mining. In Proceedings of the 34th Annual Conference on Information Sciences and Systems (CISS-00), New Jersey, 2000.
17. I. Witten, R. Neal, and J. Cleary. Arithmetic coding for data compression. In Communications of the ACM, pages 520-540. June, 1987.
18. Y. Zhou, M. S. Mulekar, and P. Nerellapalli. Adaptive spam filtering using dynamic feature space. In ICTAI '05: Proceedings of the 17th IEEE International Conference on Tools with Artificial Intelligence, pages 302-309, Washington, DC, USA, 2005. IEEE Computer Society.