Chi-squared distance and metamorphic virus detection

Journal in Computer Virology

Volumn 9, Issue 1, 2013, Pages 1-14

  Toderici, Annie H ^a   Stamp, Mark ^a  

^a SAN JOSE STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANTIVIRUS SOFTWARES; CHI-SQUARED; CHI-SQUARED TEST; DETECTION METHODS; EXPERIMENTAL EVIDENCE; HIDDEN MARKOV MODEL(HMM); HMM-BASED; INTERNAL STRUCTURE; MACHINE LEARNING METHODS; MALWARES; METAMORPHIC MALWARE; MORPHING; STATISTICAL TECHNIQUES; VIRUS DETECTION;

HIDDEN MARKOV MODELS; LEARNING SYSTEMS; PERSONAL COMPUTING; VIRUSES;

COMPUTER CRIME;

EID: 84874559655     PISSN: 17729890     EISSN: 17729904     Source Type: Journal    
DOI: 10.1007/s11416-012-0171-2     Document Type: Article

References (30)

1. Aho, A. V., Corasick, M. J.: Efficient string matching: an aid to bibliographic search. Commun. ACM 18, 333-340 (1975).
2. Ataman, K., Street, W. N., Zhang, Y.: Learning to rank by maximizing auc with linear programming. IEEE Technical Report (2006).
3. Austin, T. H., Filiol, E., Josse, S., Stamp, M.: Exploring hidden Markov models for virus analysis: a semantic approach (2012) (submitted).
4. Aycock, J.: Computer Viruses and Malware. Springer, Berlin (2006).
5. Chess, D., White, S.: An undetectable computer virus. Virus Bulletin Conference (2000).
6. Borello, J., Me, L.: Code obfuscation techniques for metamorphic viruses. J. Comput. Virol. 4(3), 211-220 (2008).
7. Coulter, F., Eichorn, K.: A good decade for cybercrime. McAfee, Inc., Technical Report (2011).
8. Cygwin September 2011, [online]. Available at http://www. cygwin. com (2011).
9. Desai, P., Stamp, M.: A highly metamorphic virus generator. Int. J. Multimed. Intell. Security 1(4), 402-427 (2010).
10. Egan, J.: Signal Detection Theory and ROC Analysis. Academic Press, New York (1975).
11. Filiol, E., Josse, S.: A statistical model for undecidable viral detection. J. Comput. Virol. 3(1), 65-74 (2007).
12. Geisser, S.: Predictive Inference: An Introduction. Chapman and Hall, London (1993).
13. IDAPro, Interactive dissassembler, 2011, [online]. Available at http://www. hex-rays. com/products/ida/index. shtml.
14. Intel, Intel®Architecture Software Developer's Manual, vol. 2. Instruction Set Reference Manual, October (2011).
15. Kolter, J., Maloof, M.: Learning to detect malicious executables in the wild. Proceedings of KDD '04 (2004).
16. Lin, D., Stamp, M.: Hunting for undetectable metamorphic viruses. J. Comput. Virol. 7(3), 201-214 (2011).
17. Mitchell, T.: Machine Learning. McGraw Hill, New York (1997).
18. Schultz, M., Eskin, E., Zadok, E.: Data mining methods for data mining methods for detection of new malicious executables. Proceedings of IEEE International Conference on Data Mining (2001).
19. Madenur Sridhara, S.: Metamorphic worm that carries its own morphing engine, Master's Projects, Paper 240, (2012). http://scholarworks. sjsu. edu/etd_projects/240.
20. Madenur Sridhara, S., Stamp, M.: Metamorphic worm that carries its own morphing engine (2012) (submitted).
21. Stamp, M.: Information Security: Principles and Practice. Wiley, New York (2011).
22. Stamp, M.: A revealing introduction to hidden Markov models, [online]. Available at http://www. cs. sjsu. edu/faculty/RUA/HMM. pdf.
23. Ször, P.: The Art of Computer Virus Research and Defense. Addition Wesley Professional, Boston (2005).
24. Ször P., Ferrie P.: Hunting for metamorphic. Virus Bull. 123-144 (2001).
25. Thrun, S., Saul, L. K., Scholkopf, B. (eds.): AUC Optimization vs Error Rate Minimization. MIT Press, Cambridge (2004).
26. Toderici, A. H.: Chi-squared distance and metamorphic virus detection. Department of Computer Science, San Jose State University, May, Master's Thesis (2012).
27. Vx heavens, [online]. Available at http://www. vx. netlux. org/.
28. Wang, R.: Flash in the pan? Virus Bull. (1998).
29. Wong, W.: Analysis and detection of metamorphic computer viruses. Department of Computer Science, San Jose State University, May, Master's Thesis (2006).
30. Wong, W., Stamp, M.: Hunting for metamorphic engines. J. Comput. Virol. 2(3), 211-229 (2006).