Mining distinguishing patterns based on malware traces

doi:10.1109/ICCSIT.2010.5565105

CORC > 兰州大学 > 兰州大学 > 学院待认领 > 会议论文

	Mining distinguishing patterns based on malware traces
	Sun, Xiaoyan; Huang, Qian; Zhu, Yuefei; Guo, Ning; Sun, X.
	2010
会议日期	July 9, 2010 - July 11, 2010
会议地点	Chengdu, China
关键词	Data Mining Computer Crime Computer Science Information Technology Mining Distinguishing Pattern Malicious Behavior Mutual Informations Subgraph Mining System Calls
卷号	2
DOI	10.1109/ICCSIT.2010.5565105
页码	677-681
英文摘要	The automatic generation of malicious behavior pattern based on system call trace is important to malware detection. This paper studied the existing generation method of malicious behavior specification. In order to reduce the complexity of pattern generation, it constructs graph which vertex label is unique, and uses these graphs to mine the pattern. To address the issue of limitation of the minimal contrast subgraph mining method, it uses multiple positive and negative samples, and proposes a mining method to mine distinguishing patterns based on mutual information. It designs the overall framework of mining process, and gives the mining algorithm. Finally, validation results demonstrate the effectiveness. © 2010 IEEE.
会议录	Proceedings - 2010 3rd IEEE International Conference on Computer Science and Information Technology, ICCSIT 2010
会议录出版地	Piscataway
学科主题	Mine And Quarry Operations ; Computer Circuits And Logic Elements ; Computer Systems And Equipment ; Computer Software, Data HAndling And Applications ; Information Science
语种	英语
内容类型	会议论文
源URL	[http://ir.lzu.edu.cn/handle/262010/182869]
专题	学院待认领_会议论文
通讯作者	Sun, X.
推荐引用方式 GB/T 7714	Sun, Xiaoyan,Huang, Qian,Zhu, Yuefei,et al. Mining distinguishing patterns based on malware traces[C]. 见:. Chengdu, China. July 9, 2010 - July 11, 2010.