DocumentCode
610899
Title
Adaptive Worm Detection Model Based on Multi Classifiers
Author
Barhoom, T.S. ; Qeshta, H.A.
Author_Institution
Fac. of Inf. Technol., Islamic Univ. of Gaza, Gaza, Palestinian Authority
fYear
2013
fDate
15-16 April 2013
Firstpage
57
Lastpage
65
Abstract
Security has become ubiquitous in every area of malware newly emerging today pose a growing threat from ever perilous systems. As a result to that, Worms are in the upper part of the malware threats attacking the computer system despite the evolution of the worm detection techniques. Early detection of unknown worms is still a problem. In this paper, we proposed a "WDMAC" model for worm\´s detection using data mining techniques by combination of classifiers (Naïve Bayes, Decision Tree, and Artificial Neural Network) in multi classifiers to be adaptive for detecting known/ unknown worms depending on behavior-anomaly detection approach, to achieve higher accuracies and detection rate, and lower classification error rate. Our results show that the proposed model has achieved higher accuracies and detection rates of classification, where detection known worms are at least 98.30%, with classification error rate 1.70%, while the unknown worm detection rate is about 97.99%, with classification error rate 2.01%.
Keywords
data mining; invasive software; pattern classification; WDMAC model; adaptive worm detection model; behavior-anomaly detection approach; classification error rate; computer system; data mining techniques; malware threats; multiclassifiers; perilous systems; unknown worm detection rate; Accuracy; Adaptation models; Artificial neural networks; Grippers; Ports (Computers); Protocols; Training; Artificial Neural Network; Behavior-Anomaly Detection; Data Mining; Decision Tree; Multi Classification; Naïve Bayes; Worms;
fLanguage
English
Publisher
ieee
Conference_Titel
Information and Communication Technology (PICICT), 2013 Palestinian International Conference on
Conference_Location
Gaza
Print_ISBN
978-1-4799-0137-1
Type
conf
DOI
10.1109/PICICT.2013.20
Filename
6545938
Link To Document