Distributed Malware Detection based on Binary File Features in Cloud Computing Environment
A number of techniques have been devised by researchers to counter malware attacks,and machine learning techniques play an important role in automated malware detection.Several machine learning approaches have been applied to malware detection,based on different features derived from dynamic analysis of the malware.While these methods demonstrate promise,they pose at least two major challenges.First,these approaches are subjected to a growing array of countermeasures that increase the cost of capturing these malware binary executable file features.Further,feature extraction requires a time investment per binary file that does not scale well to the daily volume of malware instances being reported by those who diligently collect malware.In order to address the first challenge,this article proposed a binary-to-image projection algorithm based on a new type of feature extraction for the malware,was introduced in 2.To address the second challenge,the techniques scalability is demonstrated through an implementation for the distributed(Key,Value)abstraction in cloud computing environment.Both theoretical and empirical evidence demonstrate its effectiveness over other state-of-the-art malware detection techniques on malware corpus,and the proposed method could be a useful and efficient complement to dynamic analysis.
Data Mining Malware Detection Malware Images Distributed Entropy LSH
Xiaoguang Han Jigang Sun Wu Qu Xuanxia Yao
School of Computer & Communication Engineering,University of Science & Technology Beijing,Beijing,10 No.4 Oil Production Company Geological Brigade,Daqing Oil Field Company,Daqing 163111,China Tsinghua University,Beijing 100084,China;Core Research Institute,Beijing Venustech Cybervision Co.Lt
国际会议
长沙
英文
4083-4088
2014-05-31（万方平台首次上网日期，不代表论文的发表时间）