Combining supervised and unsupervised learning for zero-day malware detection

Proceedings - IEEE INFOCOM

Volumn , Issue , 2013, Pages 2022-2030

  Comar, Prakash Mandayam ^a   Liu, Lei ^a   Saha, Sabyasachi ^b   Tan, Pang Ning ^a   Nucci, Antonio ^b  

^a Michigan State University   (United States)

^b Narus Inc   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DETECTION ALGORITHM; FEATURE TRANSFORMATIONS; MALWARE DETECTION; PAYLOAD ENCRYPTION; REAL NETWORK DATUM; SECURITY THREATS; SUPERVISED AND UNSUPERVISED LEARNING; SUPERVISED CLASSIFICATION;

INTERNET SERVICE PROVIDERS; METADATA; UNSUPERVISED LEARNING;

COMPUTER CRIME;

EID: 84883108795     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2013.6567003     Document Type: Conference Paper

References (13)

1. M. Christodorescu, "Semantics-aware malware detection," in IEEE Symposium on Security and Privacy, 2005, pp. 32-46.
2. N. Idika and A. P. Mathur, "A survey of malware detection techniques," Purdue University, Technical Report SERC-TR-286, 2007.
3. A. Sung, J. Xu, P. Chavez, and S. Mukkamala, "Static analyzer of vicious executables," in Annual Computer Security Appl Conf, 2004, pp. 326-334.
4. J. Kephart and B. Arnold, "Automatic extraction of computer virus signatures," in Proceedings of the 4th Virus Bulletin Internationl Congerence, 1994, pp. 178-184.
5. T. Abou-Assaleh, N. Cercone, V. Keselj, and R. Sweidan, "Detection of new malicious code using n-grams signatures," in Proc of the 2nd Annual Conf on Privacy, Security, and Trust, 2004, pp. 193-196.
6. A. Lakhotia, A. Kapoor, and E. Kumar, "Are metamorphic viruses really invincible," Virus Bulletin, vol. 12, p. 57, 2004.
7. M. Bailey, J. Andersen, Z. Morleymao, and F. Jahanian, "Automated classification and analysis of internet malware," in In Proc of Recent Advances in Intrusion Detection, 2007.
8. V. Chandola, E. Eilertson, L. Ertoz, G. Simon, and V. Kumar, Data mining and cyber security. Springer, 2006, pp. 83-103.
9. G. Gu, R. Perdisci, J. Zhang, and W. Lee, "Botminer: Clustering analysis of network traffic for protocol and structure independent botnet detection," in USENIX Security Symposium, 2008, pp. 139-154.
10. N. Weaver, V. Paxson, S. Staniford, and R. Cunningham, "A taxonomy of computer worms," in Proc of the 2003 ACM Workshop on Rapid Malcode, 2003, pp. 11-18.
11. A. H. Sung and S. Mukkamala, "Identifying important features for intrusion detection using support vector machines and neural networks," in Symposium on Applications and the Internet (SAINT), 2003.
12. P.-Y. Hao, J.-H. Chiang, and Y.-H. Lin, "A new maximal margin spherical structured multi class support vector machine," Applied Intelligence, vol. 30, pp. 98-111, 2009.
13. L. Breiman, "Random forests," Machine Learning, vol. 45, no. 1, pp. 5-32, 2001.