首页> 外文期刊>Computer networks >ASSCA: API sequence and statistics features combined architecture for malware detection
【24h】

ASSCA: API sequence and statistics features combined architecture for malware detection

机译:ASSCA:API序列和统计功能结合了用于恶意软件检测的架构

获取原文
获取原文并翻译 | 示例
           

摘要

In this paper, a new deep learning and machine learning combined model is proposed for malware behavior analysis. One part of it analyzes the dependency relation in API (Application Programming Interface) call sequence at the functional level, and extracts features for random forest to learn and classify. The other part employs a bidirectional residual neural network to study the API sequence and discover malware with redundant information preprocessing. In the API call sequence, future information is much more important for conjecturing the semantic of the current API call. We conducted experiments on a malware dataset. The experiment results show that both methods can effectively detect malwares. However, the combined framework has better classification performance. The classification accuracy of the combined malware detection architecture is 0.967. (C) 2019 Published by Elsevier B.V.
机译:本文提出了一种新的深度学习和机器学习相结合的模型,用于恶意软件行为分析。它的一部分在功能级别上分析了API(应用程序编程接口)调用序列中的依赖关系,并提取了供随机森林学习和分类的功能。另一部分使用双向残差神经网络来研究API序列并通过冗余信息预处理发现恶意软件。在API调用序列中,将来的信息对于推测当前API调用的语义更为重要。我们对恶意软件数据集进行了实验。实验结果表明,两种方法都可以有效地检测恶意软件。但是,组合框架具有更好的分类性能。组合恶意软件检测体系结构的分类精度为0.967。 (C)2019由Elsevier B.V.发布

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号