Malicious executables classification based on behavioral factor analysis

IC4E 2010 - 2010 International Conference on e-Education, e-Business, e-Management and e-Learning

Volumn , Issue , 2010, Pages 502-506

  Zhao, Hengli ^a   Xu, Ming ^a   Zheng, Ning ^a   Yao, Jingjing ^b   Hou, Qiang ^b  

^a HANGZHOU DIANZI UNIVERSITY   (China)

^b INSTITUTE OF FORENSIC SCIENCE   (China)

Author keywords

Behaviour unit model; Malware behaviors; Malware classification; Reducing dimensions

Indexed keywords

AUTOMATED CLASSIFICATION; AUTOMATED DETECTION AND CLASSIFICATION; BEHAVIOR-BASED; BEHAVIORAL ANALYSIS; BEHAVIORAL FACTORS; BEHAVIORAL PATTERNS; BEHAVIORAL PROFILES; COMPARATIVE EXPERIMENTS; FEATURE SPACE; FEATURES VECTOR; INFORMATION GAIN; MALICIOUS EXECUTABLES; MALICIOUS SOFTWARE; MALWARE CLASSIFICATION; MALWARES; NEW CONCEPT; REAL WORLD DATA; STRING SIMILARITY;

APPLICATION PROGRAMMING INTERFACES (API); COMPUTER VIRUSES; E-LEARNING; FEATURE EXTRACTION; NETWORK SECURITY; TRACE ANALYSIS; VECTOR SPACES;

ELECTRONIC COMMERCE;

EID: 77952127541     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IC4E.2010.78     Document Type: Conference Paper

References (13)

1. G. Mc Graw, G. Morrisett, "Attacking malicious code: Report to the infosec research council", IEEE Software, 17(5), Sept 2000, pp. 33-41.
2. Wagner M. (2004). Behavior Oriented Detection of Malicious Code at Run-time. M.Sc. Thesis, Florida Institute of Technology.
3. C.Willems, T.Holz, and F.Freiling. Toward Automated Dynamic Malware Analysis Using CWSandbox. IEEE Security and Privacy, 2007, 5(2):32-39.
4. U.Bayer, C.Kruegel, and E.Kirda. TTanalyze: A Tool for Analyzing Malware. In 15th Annual Conference of the European Institute for Computer Antivirus Research, Hamburg, Germany, 2006: 180-192.
5. M.Bailey,J.Oberheide,J.Andersen,Z.M.Mao,F.Jahanian,andJ.Nazario. Automated classification and analysis of internet malware. In Proceedings RAID07,pages 178-197,2007.
6. Tony Lee & Jigar J. Mody Behavioral Classification .In Proceedings of EICAR2006,April 2006.
7. T.Holz,C.Willems,K.Rieck,P.Duessel,andP.Laskov.Learning and Classification of Malware Behavior.In DIMVA08,June2008
8. Yongtao Hu Unknown Malicious Executables Detection Based on Run-Time Behavior In Fuzzy Systems and Knowledge Discovery, 2008 pp. 391-395.
9. Wikipedia, "Sandbox" [Online], Available: http://en.wikipedia. org/wiki/Sandbox
10. V. I. Levenshtein, Binary codes capable of correcting deletions, insertions, and reversals. Soviet Physics Doklady 10 (1966):707-710.
11. Antiy Labs, "About Antiy Labs" [Online], Available: http://www.antiy.net/about/index.htm
12. J. Han, M. Kamber, Data Mining : Concepts and Techniques, Morgan Kaufmann, August 2000
13. VirusTotal Service: www.virustotal.com/