文章基本信息

标题：Integrated Feature Extraction Approach Towards Detection of Polymorphic Malware In Executable Files
本地全文：下载
作者：Mr. Emmanuel Masabo ; Dr. Kyanda Swaib Kaawaase ; Dr. Julianne SansaOtim 等
期刊名称：International Journal of Computer Science and Security (IJCSS)
电子版ISSN：1985-1553
出版年度：2016
卷号：11
期号：2
页码：25-33
出版社：Computer Science Journals
摘要：Some malware are sophisticated with polymorphic techniques such as self-mutation and emulation based analysis evasion. Most anti-malware techniques are overwhelmed by the polymorphic malware threats that self-mutate with different variants at every attack. This research aims to contribute to the detection of malicious codes, especially polymorphic malware by utilizing advanced static and advanced dynamic analyses for extraction of more informative key features of a malware through code analysis, memory analysis and behavioral analysis. Correlation based feature selection algorithm will be used to transform features; i.e. filtering and selecting optimal and relevant features. A machine learning technique called K-Nearest Neighbor (K-NN) will be used for classification and detection of polymorphic malware. Evaluation of results will be based on the following measurement metrics-True Positive Rate (TPR), False Positive Rate (FPR) and the overall detection accuracy of experiments.
关键词：Malware Detection; Static Analysis; Dynamic Analysis; Polymorphic Malware; Machine Learning.