Polonium: Tera-scale graph mining and inference for malware detection

Proceedings of the 11th SIAM International Conference on Data Mining, SDM 2011

Volumn , Issue , 2011, Pages 131-142

  Chau, Duen Horng ^a   Nachenberg, Carey ^b   Wilhelm, Jeffrey ^b   Wright, Adam ^a   Faloutsos, Christos ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b Symantec   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MALWARE; POLONIUM; QUERY PROCESSING;

BELIEF PROPAGATION ALGORITHM; DESIGN AND IMPLEMENTATIONS; DETECTION RATES; GRAPH MINING; MALWARE DETECTION; NODE GRAPH; PERCENTAGE POINTS; TRUE POSITIVE RATES;

DATA MINING;

EID: 80052678930     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1137/1.9781611972818.12     Document Type: Conference Paper

References (33)

1. Symantec. (2008, April) Symantec internet security threat report. [Online]. Available: http://eval.symantec.com/mktginfo/enterprise/white-papers/ b-whitepaper-internet-security-threat-report-xiii-04-2008.en-us.pdf
2. N. Weaver, V. Paxson, S. Staniford, and R. Cunningham, "A taxonomy of computer worms," in Proceedings of the 2003 ACM workshop on Rapid Malcode. ACM New York, NY, USA, 2003, pp. 11-18.
3. M. Christodorescu, S. Jha, S. Seshia, D. Song, and R. Bryant, "Semantics-Aware Malware Detection," in Proceedings of the 2005 IEEE Symposium on Security and Privacy. IEEE Computer Society, 2005, p. 46.
4. Symantec. Malware definition. [Online]. Available: www.symantec.com/ norton/security-response/malware.jsp
5. N. Idika and A. P. Mathur, "A Survey of Malware Detection Techniques," Department of Computer Science, Purdue University, Tech. Rep., 2007.
6. M. Siddiqui, M. C. Wang, and J. Lee, "A survey of data mining techniques for malware detection using file features," in ACMSE '08. New York, NY, USA: ACM, 2008, pp. 509-510.
7. J. Kephart and W. Arnold, "Automatic extraction of computer virus signatures," in 4th Virus Bulletin International Conference, 1994, pp. 178-184.
8. M. Schultz, E. Eskin, E. Zadok, and S. Stolfo, "Data mining methods for detection of new malicious executables," in IEEE Symposium on Security and Privacy. IEEE COMPUTER SOCIETY, 2001, pp. 38-49.
9. G. Tesauro, J. Kephart, and G. Sorkin, "Neural networks for computer virus recognition," IEEE expert, vol. 11, no. 4, pp. 5-6, 1996.
10. J. Kolter and M. Maloof, "Learning to detect and classify malicious executables in the wild," The Journal of Machine Learning Research, vol. 7, p. 2744, 2006.
11. S. Brin and L. Page, "The anatomy of a large-scale hypertextual Web search engine," Computer networks and ISDN systems, vol. 30, no. 1-7, pp. 107-117, 1998.
12. J. Kleinberg, "Authoritative sources in a hyperlinked environment," Journal of the ACM (JACM), vol. 46, no. 5, pp. 604-632, 1999.
13. Z. Gyongyi, H. Garcia-Molina, and J. Pedersen, "Combating web spam with trustrank," in VLDB '04. VLDB Endowment, 2004, p. 587.
14. H. Tong, C. Faloutsos, B. Gallagher, and T. EliassiRad, "Fast best-effort pattern matching in large attributed graphs," in SIGKDD '07. ACM, 2007, p. 746.
15. X. Zhu, "Semi-supervised learning with graphs," 2005.
16. J. Neville and D. Jensen, "Collective Classification with Relational Dependency Networks," in Workshop on Multi-Relational Data Mining (MRDM-2003), p. 77.
17. O. Neville, J. and Şimşek, D. Jensen, J. Komoroske, K. Palmer, and H. Goldberg, "Using relational knowledge discovery to prevent securities fraud," in SIGKDD '05. ACM, 2005, p. 458.
18. M. Christodorescu, S. Jha, and C. Kruegel, "Mining specifications of malicious behavior," in Proceedings of the the 6th joint meeting of the European software engineering conference and the ACM SIGSOFT symposium on The foundations of software engineering. ACM, 2007, pp. 5-14.
19. S. Pandit, D. H. Chau, S. Wang, and C. Faloutsos, "Netprobe: a fast and scalable system for fraud detection in online auction networks," in WWW '07. New York, NY, USA: ACM, 2007, pp. 201-210.
20. M. McGlohon, S. Bay, M. Anderle, D. Steier, and C. Faloutsos, "SNARE: a link analytic system for graph labeling and risk detection," in SIGKDD '09. ACM New York, NY, USA, 2009, pp. 1265-1274.
21. J. Yedidia, W. Freeman, and Y. Weiss, "Understanding belief propagation and its generalizations," Exploring artificial intelligence in the new millennium, vol. 8, pp. 236-239, 2003.
22. R. Behrman and K. Carley, "Modeling the structure and effectiveness of intelligence organizations: Dynamic information flow simulation." in Proceedings of the 8th International Command and Control Research and Technology Symposium., 2003. [Online]. Available: http://www.casos.cs.cmu.edu/ publications/papers/behrman-2003-modelingstructure.pdf
23. S. A. Macskassy and F. Provost, "Suspicion scoring based on guilt-by-association, collective inference, and focused data access." in Proceedings of the NAACSOS Conference, June 2005.
24. X. Yan and J. Han, "gspan: Graph-based substructure pattern mining," in ICDM '02. Washington, DC, USA: IEEE Computer Society, 2002, p. 721.
25. W. Wang, C. Wang, Y. Zhu, B. Shi, J. Pei, X. Yan, and J. Han, "Graphminer: a structural pattern-mining system for large disk-based graph databases and its applications," in SIGMOD '05. ACM, 2005, p. 881.
26. J. Pei, D. Jiang, and A. Zhang, "On mining cross-graph quasi-cliques," in SIGKDD '05. ACM, 2005, p. 238.
27. X. Yan, X. Zhou, and J. Han, "Mining closed relational graphs with connectivity constraints," in SIGKDD '05. ACM, 2005, p. 333.
28. Z. Zeng, J. Wang, L. Zhou, and G. Karypis, "Coherent closed quasi-clique discovery from large dense graph databases," in SIGKDD '06. ACM, 2006, p. 802.
29. P. Felzenszwalb and D. Huttenlocher, "Efficient belief propagation for early vision," International journal of computer vision, vol. 70, no. 1, pp. 41-54, 2006.
30. J. Gonzalez, Y. Low, and C. Guestrin, "Residual splash for optimally parallelizing belief propagation." AISTATS, 2009.
31. U. Kang, C. Tsourakakis, and C. Faloutsos, "PEGASUS: A Peta-Scale Graph Mining System," in ICDM '09. IEEE, 2009, pp. 229-238.
32. M. Mcglohon, L. Akoglu, and C. Faloutsos, "Weighted graphs and disconnected components: Patterns and a generator," in ACM Special Interest Group on Knowledge Discovery and Data Mining (SIG-KDD), August 2008.
33. U. Kang, D. Chau, and C. Faloutsos, "Inference of beliefs on billion-scale graphs," The 2nd Workshop on Large-scale Data Mining: Theory and Applications, 2010.