首页> 外文会议>Advanced information systems engineering workshops >Evolving Computational Intelligence System for Malware Detection
【24h】

Evolving Computational Intelligence System for Malware Detection

机译:不断发展的计算智能系统,用于恶意软件检测

获取原文
获取原文并翻译 | 示例

摘要

Recent malware developments have the ability to remain hidden during infection and operation. They prevent analysis and removal, using various techniques, namely: obscure filenames, modification of file attributes, or operation under the pretense of legitimate programs and services. Also, the malware might attempt to subvert modern detection software, by hiding running processes, network connections and strings with malicious URLs or registry keys. The malware can go a step further and obfuscate the entire file with a packer, which is special software that takes the original malware file and compresses it, thus making all the original code and data unreadable. This paper proposes a novel approach, which uses minimum computational power and resources, to indentify Packed Executable (PEX), so as to spot the existence of malware software. It is an Evolving Computational Intelligence System for Malware Detection (ECISMD) which performs classification by Evolving Spiking Neural Networks (eSNN), in order to properly label a packed executable. On the other hand, it uses an Evolving Classification Function (ECF) for the detection of malwares and applies Genetic Algorithms to achieve ECF Optimization.
机译:最近的恶意软件开发具有在感染和操作期间保持隐藏状态的能力。它们使用各种技术来防止分析和删除,即:模糊的文件名,文件属性的修改或在合法程序和服务的伪装下进行的操作。此外,该恶意软件还可能通过隐藏正在运行的进程,网络连接以及带有恶意URL或注册表项的字符串来试图颠覆现代的检测软件。该恶意软件可以更进一步,并使用打包程序混淆整个文件,该打包程序是一种特殊软件,可以提取原始恶意软件文件并对其进行压缩,从而使所有原始代码和数据都不可读。本文提出了一种新颖的方法,该方法使用最小的计算能力和资源来识别打包可执行文件(PEX),从而发现恶意软件的存在。它是一个用于恶意软件检测的演化计算智能系统(ECISMD),它通过演化尖刺神经网络(eSNN)进行分类,以正确标记打包的可执行文件。另一方面,它使用进化分类函数(ECF)来检测恶意软件,并应用遗传算法来实现ECF优化。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号