Malware detection based on dependency graph using hybrid genetic algorithm

Proceedings of the 12th Annual Genetic and Evolutionary Computation Conference, GECCO '10

Volumn , Issue , 2010, Pages 1211-1218

  Kim, Keehyung ^a   Moon, Byung Ro ^a  

^a Seoul National University   (South Korea)

Author keywords

Dependency graph; Genetic algorithm; Malware detection; Subgraph isomorphism

Indexed keywords

ANTIVIRUS SOFTWARES; COMPUTATIONAL COSTS; COMPUTER MALWARE; DAILY LIVES; DEPENDENCY GRAPHS; DETECTION ACCURACY; DETECTION MECHANISM; EXPONENTIAL GROWTH; HEURISTIC APPROACH; HYBRID GENETIC ALGORITHMS; LOGICAL STRUCTURE; MALWARE DETECTION; MALWARES; SUBGRAPH ISOMORPHISM;

GENETIC ALGORITHMS; POLYMORPHISM; SET THEORY; VIRUSES;

COMPUTER VIRUSES;

EID: 77955854581     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1830483.1830703     Document Type: Conference Paper

References (18)

1. J. Aycock. Computer Viruses and Malware. Springer, 2006.
2. I. Baxter, A. Yahin, L. Moura, M. Sant'Anna, andL. Bier. Clone detection using abstract syntax trees. In Proceedings of International Conference on Software Maintenance, pages 368-377, 1998.
3. V. Bontchev. Macro virus identification problems. Computers and Security, 17(1):69-89, 1998.
4. D. Bruschi, L. Martignoni, andM. Monga. Detecting self-mutating malware using control-flow graph matching. In DIMVA '06: Proceedings of the Conference on the Detection of Intrusions and Malwares and Vulnerability Assessment, pages 129-143, 2006.
5. T. Bui andB. Moon. A new genetic approach for the traveling salesman problem. In Proceedings of the First IEEE Conference on Evolutionary Computation. IEEE World Congress on Computational Intelligence., volume 1, pages 7-12, 1994.
6. M. R. Garey andD. S. Johnson. Computers and Intractability; A Guide to the Theory of NP-Completeness. W. H. Freeman & Co., 1990.
7. D. E. Goldberg. Genetic Algorithms in Search, Optimization and Machine Learning. Addison-Wesley Longman Publishing Co., Inc., 1989.
8. T. Kamiya, S. Kusumoto, andK. Inoue. CCFinder: a multilinguistic token-based code clone detection system for large scale source code. IEEE Transactions on Software Engineering, 28(7):654-670, 2002.
9. C. W. Ko. Method and apparatus for detecting a macro computer virus using static analysis, February 2004. United States Patent 6,697,950 B1.
10. K. Kontogiannis, M. Galler, andR. DeMori. Detecting code similarity using patterns. Working Notes of 3rd Workshop on AI and Software Engineering, 1995.
11. J. Ferrante, K. J. Ottenstein, andJ. D. Warren. The program dependence graph and its use in optimization. ACM Transactions on Programming Languages and Systems, 9(3):319-349, 1987.
12. C. Liu, C. Chen, J. Han, andP. S. Yu. GPLAG: detection of software plagiarism by program dependence graph analysis. In KDD '06: Proceedings of the 12th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pages 872-881, 2006.
13. S. Noreen, S. Murtaza, M. Z. Shafiq, andM. Farooq. Evolvable malware. In GECCO '09: Proceedings of the 11th Annual Conference on Genetic and Evolutionary Computation, pages 1569-1576, 2009.
14. S. Noreen, S. Murtaza, M. Z. Shafiq, andM. Farooq. Using formal grammar and genetic operators to evolve malware. In RAID: 12th International Symposium On Recent Advances In Intrusion Detection, volume 5758 of Lecture Notes in Computer Science, pages 374-375, 2009.
15. S. Pearce. Viral polymorphism. Sans Institute, 2003.
16. M. G. Schultz, E. Eskin, E. Zadok, andS. J. Stolfo. Data mining methods for detection of new malicious exécutables. In SP '01: Proceedings of the 2001 IEEE Symposium on Security and Privacy, page 38, 2001.
17. M. Z. Shafiq, S. M. Tabish, andM. Farooq. On the appropriateness of evolutionary rule learning algorithms for malware detection. In GECCO '09: Proceedings of the 11th Annual Conference on Genetic and Evolutionary Computation, pages 2609-2616, 2009.
18. G. Tesauro, J. Kephart, andG. Sorkin. Neural networks for computer virus recognition. IEEE Expert, 11(4):5-6, 1996.