图 书 馆
智能恶意软件检测系统IMDS: Intelligent Malware Detection System |
|
| 课程网址: | http://videolectures.net/kdd07_ye_imds/ |
| 主讲教师: | Yanfang Ye |
| 开课单位: | 西弗吉尼亚大学 |
| 开课时间: | 2007-08-14 |
| 课程语种: | 英语 |
| 中文简介: |  |
| 课程简介: | The proliferation of malware has presented a serious threat to the security of computer systems. Traditional signature-based antivirus systems fail to detect polymorphic and new, previously unseen malicious executables. In this paper, resting on the analysis of Windows API execution sequences called by PE files, we develop the Intelligent Malware Detection System (IMDS) using Objective Oriented Association (OOA) mining based classification. IMDS is an integrated system consisting of three major modules: PE parser, OOA rule generator, and rule based classifier. An OOA Fast FPGrowth algorithm is adapted to efficiently generate OOA rules for classification. A comprehensive experimental study on a large collection of PE files obtained from the anti-virus laboratory of King Soft Corporation is performed to compare various malware detection approaches. Promising experimental results demonstrate that the accuracy and efficiency of our IMDS system outperform popular anti-virus software such as Norton AntiVirus and McAfee VirusScan, as well as previous data mining based detection systems which employed Naive Bayes, Support Vector Machine (SVM) and Decision Tree techniques. |
| 关 键 词: | 恶意软件; 防病毒系统; 计算机系统 |
| 课程来源: | 视频讲座网 |
| 最后编审: | 2019-05-09：lxf |
| 阅读次数: | 59 |