Behavior analysis of malware using machine learning
Authors:
- 1 August 2015
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 481-486
Abstract
In today's scenario, cyber security is one of the major concerns in network security and malware pose a serious threat to cyber security. The foremost step to guard the cyber system is to have an in-depth knowledge of the existing malware, various types of malware, methods of detecting and bypassing the adverse effects of malware. In this work, machine learning approach to the fore-going static and dynamic analysis techniques is investigated and reported to discuss the most recent trends in cyber security. The study captures a wide variety of samples from various online sources. The peculiar details about the malware such as file details, signatures, and hosts involved, affected files, registry keys, mutexes, section details, imports, strings and results from different antivirus have been deeply analyzed to conclude origin and functionality of malware. This approach contributes to vital cyber situation awareness by combining different malware discovery techniques, for example, static examination, to alter the session of malware triage for cyber defense and decreases the count of false alarms. Current trends in warfare have been determined.Keywords
This publication has 9 references indexed in Scilit:
- Malware Obfuscation Techniques: A Brief Survey2010
- The WEKA data mining softwareACM SIGKDD Explorations Newsletter, 2009
- An automated classification system based on the strings of trojan and virus families2009
- Function length as a tool for malware classification2008
- Mining specifications of malicious behavior2007
- Dynamic Analysis of Malicious CodeJournal of Computer Virology and Hacking Techniques, 2006
- Learning to detect malicious executables in the wild2004
- Data mining methods for detection of new malicious executables2002
- Fast Effective Rule Induction1995