Veto-based malware detection

Proceedings - 2012 7th International Conference on Availability, Reliability and Security, ARES 2012

Volumn , Issue , 2012, Pages 47-54

  Shahzad, Raja Khurram ^a   Lavesson, Niklas ^a  

^a BLEKINGE INSTITUTE OF TECHNOLOGY   (Sweden)

Author keywords

classification; detection; ensembles; feature extraction; majority voting; Malware; scareware; veto voting

Indexed keywords

ENSEMBLES; MAJORITY VOTING; MALWARES; SCAREWARE; VETO VOTING;

CLASSIFICATION (OF INFORMATION); ERROR DETECTION; FEATURE EXTRACTION; HEURISTIC METHODS; LEARNING ALGORITHMS;

COMPUTER CRIME;

EID: 84869403967     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2012.85     Document Type: Conference Paper

References (25)

1. L. Martignoni, E. Stinson, M. Fredrikson, S. Jha, and J. Mitchell, "A layered architecture for detecting malicious behaviors," in Recent Advances in Intrusion Detection, 2008, pp. 78-97.
2. W. Stallings, Network Security Essentials: Applications and Standards, 4th ed. Prentice Hall, 2011.
3. T. M. Mitchell, Machine Learning, 1st ed. McGraw-Hill, Inc., 1997.
4. I. H. Witten, E. Frank, and M. A. Hall, Data Mining: Practical Machine Learning Tools and Techniques, 3rd ed. Morgan Kaufmann Inc., 2011.
5. M. Schultz, E. Eskin, F. Zadok, and S. Stolfo, "Data mining methods for detection of new malicious executables," in Proceedings of the Symposium on Security and Privacy, 2001, pp. 38-49.
6. R. K. Shahzad, S. I. Haider, and N. Lavesson, "Detection of spyware by mining executable files," in Proceedings of the 5th International Conference on Availability, Reliability, and Security. IEEE Computer Society, 2010, pp. 295-302.
7. R. K. Shahzad and N. Lavesson, "Detecting scareware by mining variable length instruction sequences," in Proceedings of the 10th Annual Information Security South Africa Conference, 2011, pp. 1-8.
8. A. Gepperth, "Object detection and feature base learning with sparse convolutional neural networks." in Proceedings of the 2nd international conference on Artificial Neural Networks in Pattern Recognition, 2006, pp. 221-232.
9. D. Tikk, Z. T. Kardkovács, and F. P. Szidarovszky, "Voting with a parameterized veto strategy: Solving the KDD cup 2006 problem by means of a classifier committee," ACM Special Interest Group on Knowledge Discovery and Data Mining (SIGKDD) Explorations Newsletter, vol. 8, no. 2, pp. 53-62, 2006.
10. R. Kern, C. Seifert, M. Zechner, and M. Granitzer, "Vote/veto meta-classifier for authorship identification - notebook for pan at clef 2011," in Proceedings of the Conference on Multilingual and Multimodal Information Access Evaluation, 2011.
11. S. Weiss, C. Apte, F. Damerau, D. Johnson, F. Oles, T. Goetz, and T. Hampp, "Maximizing text-mining performance," IEEE Intelligent Systems and their Applications, vol. 14, no. 4, pp. 63-69, 1999.
12. G. Giacinto and F. Roli, "Methods for dynamic classifier selection," in Proceedings of International Conference on Image Analysis and Processing, 1999, pp. 659-664.
13. A. Santana, R. G. F. Soares, A. M. P. Canuto, and M. C. P. d. Souto, "A dynamic classifier selection method to build ensembles using accuracy and diversity," in 9th Brazilian Symposium on Neural Networks, 2006, pp. 36-41.
14. H. Moulin, "Voting with proportional veto power," Econometrica, vol. 50, no. 1, pp. 145-62, 1982.
15. L. I. Kuncheva, "Diversity in multiple classifier systems," Information Fusion, vol. 6, no. 1, pp. 3-4, 2005.
16. M. Hall, E. Frank, G. Holmes, B. Pfahringer, P. Reutemann, and I. H. Witten, "The WEKA data mining software: an update," ACM Special Interest Group on Knowledge Discovery and Data Mining (SIGKDD) Explorations Newsletter, vol. 11, pp. 10-18, 2009.
17. R. Moskovitch, C. Feher, N. Tzachar, E. Berger, M. Gitelman, S. Dolev, and Y. Elovici, "Unknown malcode detection using OPCODE representation," in Proceedings of the 1st European Conference on Intelligence and Security Informatics, 2008, pp. 204-215.
18. G. Salton and C. Buckley, "Term-weighting approaches in automatic text retrieval," in Information Processing and Managment, 1988, pp. 513-523.
19. W. Cohen, "Fast effective rule induction," in Proceedings of 12th International Conference on Machine Learning. Morgan Kaufmann Publishers Inc., 1995, pp. 115-23.
20. J. R. Quinlan, C4.5: programs for machine learning. Morgan Kaufmann Publishers Inc., 1993.
21. T. Cover and P. Hart, "Nearest neighbor pattern classification, " IEEE Transactions on Information Theory, vol. 13, no. 1, pp. 21-27, 1967.
22. J. Platt, "Sequential minimal optimization: A fast algorithm for training support vector machines," Microsoft Research Technical Report MST-TR-98-14, 1998.
23. J. Franke, L. Lam, R. Legault, C. Nadal, and C. Y. Suen, "Experiments with the cenparmi data base combining different classification approaches," in Proceedings of 3rd International Workshop Frontiers Handwriting Recognition, 1993, pp. 305-311.
24. A. Rahman, H. Alam, and M. Fairhurst, "Multiple classifier combination for character recognition: Revisiting the majority voting system and its variations," in Proceedings of the 5th International Workshop on Document Analysis Systems, 2002, pp. 167-178.
25. D. Ruta and B. Gabrys, "Classifier selection for majority voting," Information Fusion, vol. 6, no. 1, pp. 63-81, 2005.