Towards Automating Malware Classification and Characterization

Seewald, Alexander K.

Towards Automating Malware Classification and Characterization

dc.contributor.author	Seewald, Alexander K.
dc.contributor.editor	Alkassar, Ammar
dc.contributor.editor	Siekmann, Jörg
dc.date.accessioned	2019-04-03T13:29:10Z
dc.date.available	2019-04-03T13:29:10Z
dc.date.issued	2008
dc.description.abstract	Spam has become a problem of global impact. Most spam messages are currently sent out by captured machines organized in bot networks, which are infected with malicious software and are therefore under direct control of spammers. The connected explosion of automatically generated new malware variants has manual analysis at a great disadvantage, while classical automated analysis systems have problems keeping up with the diversity of new variants. Here, we propose using machine learning approaches to learn global (i.e. malware intent) and local (i.e. specific functionality) malware properties based on behavioral traces of malware recorded in virtual environments, and test them on a small corpus. Initial results are somewhat promising, so we also discuss areas for improvement as well as current and future challenges.	en
dc.identifier.isbn	978-3-88579-222-2
dc.identifier.pissn	1617-5468
dc.identifier.uri	https://dl.gi.de/handle/20.500.12116/21484
dc.language.iso	en
dc.publisher	Gesellschaft für Informatik e. V.
dc.relation.ispartof	SICHERHEIT 2008 – Sicherheit, Schutz und Zuverlässigkeit. Beiträge der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI)
dc.relation.ispartofseries	Lecture Notes in Informatics (LNI) - Proceedings, Volume P-128
dc.title	Towards Automating Malware Classification and Characterization	en
dc.type	Text/Conference Paper
gi.citation.endPage	302
gi.citation.publisherPlace	Bonn
gi.citation.startPage	291
gi.conference.date	2.- 4. April 2008
gi.conference.location	Saarbrücken
gi.conference.sessiontitle	Regular Research Papers

Dateien

Originalbündel

1 - 1 von 1

Name:: 291.pdf
Größe:: 2.66 MB
Format:: Adobe Portable Document Format

Herunterladen

Sammlungen

P128 - Sicherheit 2008 – Sicherheit, Schutz und Zuverlässigkeit. Beiträge der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI)