• DocumentCode
    2977449
  • Title

    A static detection model of malicious PDF documents based on naive Bayesian classifier technology

  • Author

    Huang Cheng ; Fang Yong ; Liu Liang ; Lu-Rong Wang

  • Author_Institution
    Sch. of Electron. & Inf. Eng., Sichuan Univ., Chengdu, China
  • fYear
    2012
  • fDate
    17-19 Dec. 2012
  • Firstpage
    29
  • Lastpage
    32
  • Abstract
    For the purpose of improving native detective method based on signature matching of traditional anti-virus software and inadequate performance of dynamic testing, the researchers demonstrate a new static detection model of malicious PDF documents based on naive Bayes classifier technology. The model considers with exploit techniques of heap spray, JavaScript syntax and shellcode feature. Compare to traditional detection techniques, the training samples and actual test data showed that the detection efficiency and accuracy of the model have improved greatly.
  • Keywords
    Bayes methods; Java; digital signatures; document handling; pattern classification; JavaScript syntax; antivirus software; detection technique; dynamic testing; heap spray; malicious PDF documents; naive Bayesian classifier technology; native detective method; shellcode feature; signature matching; static detection model; Abstracts; Blogs; Portable document format; Static model; heap spray; malicious document; naive Bayes;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Wavelet Active Media Technology and Information Processing (ICWAMTIP), 2012 International Conference on
  • Conference_Location
    Chengdu
  • Print_ISBN
    978-1-4673-1684-2
  • Type

    conf

  • DOI
    10.1109/ICWAMTIP.2012.6413432
  • Filename
    6413432