Ana gezinime geç Aramaya geç Ana içeriğe geç

A multi-dimensional machine learning approach to predict advanced malware

  • Şerif Bahtiyar*
  • , Mehmet Barış Yaman
  • , Can Yılmaz Altıniğne
  • *Bu çalışma için yazışmadan sorumlu yazar
  • Istanbul Technical University

Araştırma sonucu: Dergiye katkıMakalebilirkişi

32 Atıf (Scopus)

Özet

The growth of cyber-attacks that are carried out with malware have become more sophisticated on almost all networks. Furthermore, attacks with advanced malware have the greatest complexity which makes them very hard to detect. Advanced malware is able to obfuscate much of their traces through many mechanisms, such as metamorphic engines. Therefore, predictions and detections of such malware have become significant challenge for malware analyses mechanisms. In this paper, we propose a multi-dimensional machine learning approach to predict Stuxnet like malware from a dataset that consists of malware samples by using five distinguishing features of advanced malware. We define the features by analyzing advanced malware samples in the wild. Our approach uses regression models to predict advanced malware. We create a malware dataset from existing datasets that contain real samples for experimental purposes. Analyses results show that there are high correlations among some features of advanced malware. These provide better predictions scores, such as R2=0.8203 score for Stuxnet closeness feature. Experimental analyses show that our approach is able to predict Stuxnet like advanced malware if prediction features defined.

Orijinal dilİngilizce
Sayfa (başlangıç-bitiş)118-129
Sayfa sayısı12
DergiComputer Networks
Hacim160
DOI'lar
Yayın durumuYayınlandı - 4 Eyl 2019

Bibliyografik not

Publisher Copyright:
© 2019 Elsevier B.V.

Finansman

This work is supported by Istanbul Teknik Üniversitesi under the BAP project, number MAB-2017-40642 .

FinansörlerFinansör numarası
Istanbul Teknik ÜniversitesiMAB-2017-40642

    Parmak izi

    A multi-dimensional machine learning approach to predict advanced malware' araştırma başlıklarına git. Birlikte benzersiz bir parmak izi oluştururlar.

    Alıntı Yap