DocumentCode :
610899
Title :
Adaptive Worm Detection Model Based on Multi Classifiers
Author :
Barhoom, T.S. ; Qeshta, H.A.
Author_Institution :
Fac. of Inf. Technol., Islamic Univ. of Gaza, Gaza, Palestinian Authority
fYear :
2013
fDate :
15-16 April 2013
Firstpage :
57
Lastpage :
65
Abstract :
Security has become ubiquitous in every area of malware newly emerging today pose a growing threat from ever perilous systems. As a result to that, Worms are in the upper part of the malware threats attacking the computer system despite the evolution of the worm detection techniques. Early detection of unknown worms is still a problem. In this paper, we proposed a "WDMAC" model for worm\´s detection using data mining techniques by combination of classifiers (Naïve Bayes, Decision Tree, and Artificial Neural Network) in multi classifiers to be adaptive for detecting known/ unknown worms depending on behavior-anomaly detection approach, to achieve higher accuracies and detection rate, and lower classification error rate. Our results show that the proposed model has achieved higher accuracies and detection rates of classification, where detection known worms are at least 98.30%, with classification error rate 1.70%, while the unknown worm detection rate is about 97.99%, with classification error rate 2.01%.
Keywords :
data mining; invasive software; pattern classification; WDMAC model; adaptive worm detection model; behavior-anomaly detection approach; classification error rate; computer system; data mining techniques; malware threats; multiclassifiers; perilous systems; unknown worm detection rate; Accuracy; Adaptation models; Artificial neural networks; Grippers; Ports (Computers); Protocols; Training; Artificial Neural Network; Behavior-Anomaly Detection; Data Mining; Decision Tree; Multi Classification; Naïve Bayes; Worms;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Information and Communication Technology (PICICT), 2013 Palestinian International Conference on
Conference_Location :
Gaza
Print_ISBN :
978-1-4799-0137-1
Type :
conf
DOI :
10.1109/PICICT.2013.20
Filename :
6545938
Link To Document :
بازگشت