DocumentCode
1566627
Title
An approach of malicious executables detection on black & gray based on adaboost algorithm
Author
Liu, Lei ; Shao, Kun
Author_Institution
Sch. of Comput. & Inf., Hefei Univ. of Technol., Hefei
fYear
2008
Firstpage
88
Lastpage
92
Abstract
Behavioral analysis refers to the technique of deciding whether an application is malicious or not, according to what it does. With behavioral analysis research on executables evolving, it is difficult to classify malicious applications and some legal applications called dasiagray applicationpsila, which are classified as malicious sample by dasiaweakpsila learners. In theory, boosting can be used to significantly reduce the error of dasiaweakpsila learning algorithm that consistently generates classifiers which need only be a little bit better than random guessing. This paper presents an approach based on a new boosting algorithm called AdaBoost, which improves the performance of any dasiaweakpsila learning algorithm. Experiment results show that the method has good classification accuracy in experiment data sets.
Keywords
computer viruses; learning (artificial intelligence); AdaBoost algorithm; behavioral analysis; classification accuracy; gray application; legal application; malicious application; malicious executables detection; random guessing; weak learning algorithm; Application software; Boosting; Computer viruses; Law; Legal factors; Psychology; Remote monitoring; Security; Viruses (medical); Web and internet services; Adaboost algorithm; ROC; malicious executable; malicious host behaviors; style;
fLanguage
English
Publisher
ieee
Conference_Titel
Anti-counterfeiting, Security and Identification, 2008. ASID 2008. 2nd International Conference on
Conference_Location
Guiyang
Print_ISBN
978-1-4244-2584-6
Electronic_ISBN
978-1-4244-2585-3
Type
conf
DOI
10.1109/IWASID.2008.4688357
Filename
4688357
Link To Document