Malware classification method based on static multiple-feature fusion

In recent years,the amount of the malwares has tended to rise explosively.New malicious samples emerge as variability and polymorphism.By means of polymorphism,shelling and confusion,traditional ways of detecting can be avoided.On the basis of massive malicious samples,a safe and efficient method wa...

Full description

Saved in:
Bibliographic Details
Main Authors: Bo-wen SUN, Yan-yi HUANG, Qiao-kun WEN, Bin TIAN, Peng WU, Qi LI
Format: Article
Language:English
Published: POSTS&TELECOM PRESS Co., LTD 2017-11-01
Series:网络与信息安全学报
Subjects:
Online Access:http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2017.00217
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:In recent years,the amount of the malwares has tended to rise explosively.New malicious samples emerge as variability and polymorphism.By means of polymorphism,shelling and confusion,traditional ways of detecting can be avoided.On the basis of massive malicious samples,a safe and efficient method was designed to classify the mal-wares.Extracting three static features including file byte features,assembly features and PE features,as well as im-proving generalization of the model through feature fusion and ensemble learning,which realized the complementarity between the features and the classifier.The experiments show that the sample achieve a stable F1-socre (93.56%).
ISSN:2096-109X