Malware analysis with graph kernels and support vector machines

被引:18
|
作者
Wagner, Cynthia [1 ]
Wagener, Gerard [1 ]
State, Radu [1 ]
Engel, Thomas [1 ]
机构
[1] Univ Luxembourg, FSTC, Secan Lab, L-1359 Luxembourg, Luxembourg
关键词
D O I
10.1109/MALWARE.2009.5403018
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
This paper addresses a fundamentally new method for analyzing the behavior of executed applications and sessions. We describe a modeling framework capable of representing relationships among processes belonging to the same session in an integrated way, as well as the information related to the underlying system calls executed. We leverage for this purpose graph-based kernels and Support Vector Machines (SVM) in order to classify either individually monitored applications or more comprehensive user sessions. Our approach can serve both as a host-level intrusion detection and application level monitoring and as an adaptive jail framework.
引用
收藏
页码:63 / 68
页数:6
相关论文
共 50 条
  • [41] Analysis of support vector machines
    Abe, S
    NEURAL NETWORKS FOR SIGNAL PROCESSING XII, PROCEEDINGS, 2002, : 89 - 98
  • [42] Support Vector Machine for malware analysis and classification
    Kruczkowski, Michal
    Niewiadomska-Szynkiewicz, Ewa
    2014 IEEE/WIC/ACM INTERNATIONAL JOINT CONFERENCES ON WEB INTELLIGENCE (WI) AND INTELLIGENT AGENT TECHNOLOGIES (IAT), VOL 2, 2014, : 415 - 420
  • [43] Evaluation of Kernels Applied in Support Vector Machines in the Data Analysis of Organochlorines Exposure in Study of Biomarkers
    Alejandro Lopera-Rodriguez, Jorge
    Zuluaga, Martha
    Jaramillo-Garzon, Jorge A.
    VIII LATIN AMERICAN CONFERENCE ON BIOMEDICAL ENGINEERING AND XLII NATIONAL CONFERENCE ON BIOMEDICAL ENGINEERING, 2020, 75 : 784 - 791
  • [44] Learning Malware Using Generalized Graph Kernels
    Khanh Huu The Dam
    Touili, Tayssir
    13TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY AND SECURITY (ARES 2018), 2019,
  • [45] An Empirical Analysis of Evolved Radial Basis Function Networks and Support Vector Machines with Mixture of Kernels
    Dash, Ch. Sanjeev Kumar
    Sahoo, Pulak
    Dehuri, Satchidananda
    Cho, Sung-Bae
    INTERNATIONAL JOURNAL ON ARTIFICIAL INTELLIGENCE TOOLS, 2015, 24 (04)
  • [46] Support Vector Machines with Time Series Distance Kernels for Action Classification
    Bagheri, Mohammad Ali
    Gao, Qigang
    Escalera, Sergio
    2016 IEEE WINTER CONFERENCE ON APPLICATIONS OF COMPUTER VISION (WACV 2016), 2016,
  • [47] Consistency of support vector machines using additive kernels for additive models
    Christmann, Andreas
    Hable, Robert
    COMPUTATIONAL STATISTICS & DATA ANALYSIS, 2012, 56 (04) : 854 - 873
  • [49] Face recognition using support vector machines with local correlation kernels
    Kim, KI
    Kim, JH
    Jung, K
    INTERNATIONAL JOURNAL OF PATTERN RECOGNITION AND ARTIFICIAL INTELLIGENCE, 2002, 16 (01) : 97 - 111
  • [50] Compositional optimization of quantum circuits for quantum kernels of support vector machines
    Torabian, Elham
    Krems, Roman V.
    PHYSICAL REVIEW RESEARCH, 2023, 5 (01):