Automatic malware categorization using cluster ensemble

Proceedings of the ACM SIGKDD International Conference on Knowledge Discovery and Data Mining

Volumn , Issue , 2010, Pages 95-104

  Ye, Yanfang ^a   Li, Tao ^b   Chen, Yong ^c   Jiang, Qingshan ^a  

^a XIAMEN UNIVERSITY   (China)

^b The Department of Electrical and Computer Engineering   (United States)

^c Kingsoft Corporation   (China)

Author keywords

Cluster ensemble; Malware categorization; Signature

Indexed keywords

ANTI VIRUS; ANTI-MALWARE; CATEGORIZATION SYSTEMS; CLUSTER ENSEMBLES; CLUSTERING SOLUTIONS; CLUSTERING TECHNIQUES; CLUSTERINGS; COMPUTER SECURITY; DOMAIN KNOWLEDGE; FEATURE REPRESENTATION; HIER-ARCHICAL CLUSTERING; HIERARCHICAL CLUSTERING ALGORITHMS; K-MEDOIDS; MALWARE ANALYSIS; MALWARE DETECTION; MALWARES; SIGNATURE;

CLUSTER ANALYSIS; COMPUTER CRIME; NETWORK SECURITY; VIRUSES;

CLUSTERING ALGORITHMS;

EID: 77956221197     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1835804.1835820     Document Type: Conference Paper

References (28)

1. Javad Azimi and Xiaoli Fern. Adaptive cluster ensemble selection. In Proceedings of IJCAI, pages 992-997, 2009.
2. Ricardo Baeza-Yates and Berthier Ribeiro-Neto. Modern Information Retrieval. Addison Wesley, 1999.
3. S. Basu, I. Davidson, and K. L. Wagstaff, editors. Constrained Clustering: Advances in Algorithms, Theory, and Applications. CRC Press, 2008.
4. Ulrich Bayer, Paolo Milani Comparetti, Clemens Hlauschek, Christopher Kruegel, and Engin Kirda. Scalable, behavior-based malware clustering. NDSS'09 Security Symposium, 2009.
5. Kevin S. Beyer, Jonathan Goldstein, Raghu Ramakrishnan, and Uri Shaft. When is nearest neighbor meaningful? In Proceedings of 7th International Conference on Database Theory(ICDT'99), pages 217-235. Springer, 1999.
6. Chris Ding and Tao Li. Adaptive dimension reduction using discriminant analysis and k-means clustering. In ICML, pages 521-528, 2007.
7. Xiaoli Zhang Fern and Carla E. Brodley. Solving cluster ensemble problems by bipartite graph partitioning. In ICML, page 36, 2004.
8. F. Sebastiani. Text categorization. ACM Computing Surveys, 34:1-47, 2002.
9. Y. Fukuyama and M. Sugeno. A new method of choosing the number of clusters for the fuzzy c-means method. Proc. 5th Fuzzy Syst. Sym, pages 247-250, 1989.
10. Marius Gheorghescu. An automated virus classification system. Virus Bulletin Conference, 2005.
11. Aristides Gionis, Heikki Mannila, and Panayiotis Tsaparas. Clustering aggregation. In ICDE, pages 341-352, 2005.
12. Ibai Gurrutxaga, Olatz Arbelaitz, Jesus Ma Perez, Javier Muguerza, Jose I. Martin, and Inigo Perona. Evaluation of malware clustering based on its dynamic behaviour. Seventh Australasian Data Mining Conference, 2008.
13. Liping Jing, Michael K. Ng, and Joshua Zhexue Huang. An entropy weighting k-means algorithm for subspace clustering of high-dimensional sparse data. IEEE Trans. on Knowl. and Data Eng., 19(8):1026-1041, 2007.
14. Kaufman L and Rousseeuw PJ. Partitioning around medoids (program pam). Finding groups in data: an introduction to cluster analysis, 1990.
15. Tony Lee and Jigar J. Mody. Behavioral classification. EICAR 2006, May 2006.
16. Tao Li and Chris Ding. Weighted Consensus Clustering. In SIAM Data Mining, 2008.
17. Tao Li, Chris Ding, and Michael I. Jordan. Solving consensus and semi-supervised clustering problems using nonnegative matrix factorization. In ICDM, 2007.
18. M. Bailey, J. Oberheide, J. Andersen, Z. M. Mao, F. Jahanian, and J. Nazario. Automated classification and analysis of internet malware. RAID, 4637:178-197, 2007.
19. Stefano Monti, Pablo Tamayo, Jill Mesirov, and Todd Gloub. Consensus clustering: A resampling-based method for class discovery and visualization of gene expression microarray data. Machine Learning Journal, 52(1-2):91-118, 2003.
20. L. Parsons, E. Haque, and H. Liu. Subspace clustering for high dimensional data: a review. SIGKDD Explorations, 6:90-105, 2004.
21. Konrad Rieck, Thorsten Holz, Carsten Willems, Patrick Dussel, and Pavel Laskov. Learning and classification of malware behavior. In Fifth Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA'08), pages 108-125, 2008.
22. M. Schultz, E. Eskin, and E. Zadok. Data mining methods for detection of new malicious executables. In Proccedings of 2001 IEEE Symposium on Security and Privacy, pages 38-49, 2001.
23. Alexander Strehl and Joydeep Ghosh. Cluster ensembles - a knowledge reuse framework for combining multiple partitions. JMLR, 3:583-617, March 2003.
24. R. Tian, L.M. Batten, and S.C. Versteeg. Function length as a tool for malware classification. 3rd International Conference on Malicious and Unwanted Software (MALWARE), 2008.
25. Alexander P. Topchy, Anil K. Jain, and William F. Punch. Clustering ensembles: Models of consensus and weak partitions. IEEE Trans. Pattern Anal. Mach. Intell., 27(12):1866-1881, 2005.
26. Fei Wang, Xin Wang, and Tao Li. Generalized cluster aggregation. In Proceedings of IJCAI, pages 1279-1284, 2009.
27. Rui Xu and Donald Wunsch. Survey of clustering algorithms. IEEE transactions on neural networks, 16, May 2005.
28. Yanfang Ye, Dingding Wang, Tao Li, and Dongyi Ye. IMDS: Intelligent malware detection system. In SIGKDD, 2007.