Mining distinguishing patterns based on malware traces | |
Sun, Xiaoyan; Huang, Qian; Zhu, Yuefei; Guo, Ning; Sun, X. | |
2010 | |
会议日期 | July 9, 2010 - July 11, 2010 |
会议地点 | Chengdu, China |
关键词 | Data Mining Computer Crime Computer Science Information Technology Mining Distinguishing Pattern Malicious Behavior Mutual Informations Subgraph Mining System Calls |
卷号 | 2 |
DOI | 10.1109/ICCSIT.2010.5565105 |
页码 | 677-681 |
英文摘要 | The automatic generation of malicious behavior pattern based on system call trace is important to malware detection. This paper studied the existing generation method of malicious behavior specification. In order to reduce the complexity of pattern generation, it constructs graph which vertex label is unique, and uses these graphs to mine the pattern. To address the issue of limitation of the minimal contrast subgraph mining method, it uses multiple positive and negative samples, and proposes a mining method to mine distinguishing patterns based on mutual information. It designs the overall framework of mining process, and gives the mining algorithm. Finally, validation results demonstrate the effectiveness. © 2010 IEEE. |
会议录 | Proceedings - 2010 3rd IEEE International Conference on Computer Science and Information Technology, ICCSIT 2010
![]() |
会议录出版地 | Piscataway |
学科主题 | Mine And Quarry Operations ; Computer Circuits And Logic Elements ; Computer Systems And Equipment ; Computer Software, Data HAndling And Applications ; Information Science |
语种 | 英语 |
内容类型 | 会议论文 |
源URL | [http://ir.lzu.edu.cn/handle/262010/182869] ![]() |
专题 | 学院待认领_会议论文 |
通讯作者 | Sun, X. |
推荐引用方式 GB/T 7714 | Sun, Xiaoyan,Huang, Qian,Zhu, Yuefei,et al. Mining distinguishing patterns based on malware traces[C]. 见:. Chengdu, China. July 9, 2010 - July 11, 2010. |
个性服务 |
查看访问统计 |
相关权益政策 |
暂无数据 |
收藏/分享 |
除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。
修改评论