DocumentCode :
1566627
Title :
An approach of malicious executables detection on black & gray based on adaboost algorithm
Author :
Liu, Lei ; Shao, Kun
Author_Institution :
Sch. of Comput. & Inf., Hefei Univ. of Technol., Hefei
fYear :
2008
Firstpage :
88
Lastpage :
92
Abstract :
Behavioral analysis refers to the technique of deciding whether an application is malicious or not, according to what it does. With behavioral analysis research on executables evolving, it is difficult to classify malicious applications and some legal applications called dasiagray applicationpsila, which are classified as malicious sample by dasiaweakpsila learners. In theory, boosting can be used to significantly reduce the error of dasiaweakpsila learning algorithm that consistently generates classifiers which need only be a little bit better than random guessing. This paper presents an approach based on a new boosting algorithm called AdaBoost, which improves the performance of any dasiaweakpsila learning algorithm. Experiment results show that the method has good classification accuracy in experiment data sets.
Keywords :
computer viruses; learning (artificial intelligence); AdaBoost algorithm; behavioral analysis; classification accuracy; gray application; legal application; malicious application; malicious executables detection; random guessing; weak learning algorithm; Application software; Boosting; Computer viruses; Law; Legal factors; Psychology; Remote monitoring; Security; Viruses (medical); Web and internet services; Adaboost algorithm; ROC; malicious executable; malicious host behaviors; style;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Anti-counterfeiting, Security and Identification, 2008. ASID 2008. 2nd International Conference on
Conference_Location :
Guiyang
Print_ISBN :
978-1-4244-2584-6
Electronic_ISBN :
978-1-4244-2585-3
Type :
conf
DOI :
10.1109/IWASID.2008.4688357
Filename :
4688357
Link To Document :
بازگشت