{"title":"使用GURLS检测勒索软件","authors":"N. Harikrishnan, K. Soman","doi":"10.1109/ICAECC.2018.8479444","DOIUrl":null,"url":null,"abstract":"Ransomware is a malware, which upon execution scrambles the framework and it denies the client from accessing the data until the point when a payoff sum is not met from the victim. Recently, this kind of malware has shown a massive growth and had affected nearly 100 nations around the globe. In this paper we propose GURLS (Grand Unified Regularized Least Square) based approach to detect ransomware and classify it into different categories. The features used for training and testing are application programming interface (API) invocations and strings. This paper compares the performance of each of these features for classification and the effectiveness of RBF Kernel. The results obtained shows that using RBF kernel gives better accuracy.","PeriodicalId":106991,"journal":{"name":"2018 Second International Conference on Advances in Electronics, Computers and Communications (ICAECC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2018-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"6","resultStr":"{\"title\":\"Detecting Ransomware using GURLS\",\"authors\":\"N. Harikrishnan, K. Soman\",\"doi\":\"10.1109/ICAECC.2018.8479444\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Ransomware is a malware, which upon execution scrambles the framework and it denies the client from accessing the data until the point when a payoff sum is not met from the victim. Recently, this kind of malware has shown a massive growth and had affected nearly 100 nations around the globe. In this paper we propose GURLS (Grand Unified Regularized Least Square) based approach to detect ransomware and classify it into different categories. The features used for training and testing are application programming interface (API) invocations and strings. This paper compares the performance of each of these features for classification and the effectiveness of RBF Kernel. The results obtained shows that using RBF kernel gives better accuracy.\",\"PeriodicalId\":106991,\"journal\":{\"name\":\"2018 Second International Conference on Advances in Electronics, Computers and Communications (ICAECC)\",\"volume\":\"1 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2018-02-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"6\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2018 Second International Conference on Advances in Electronics, Computers and Communications (ICAECC)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICAECC.2018.8479444\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2018 Second International Conference on Advances in Electronics, Computers and Communications (ICAECC)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICAECC.2018.8479444","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 6
摘要
勒索软件是一种恶意软件,它在执行时扰乱框架,并拒绝客户端访问数据,直到受害者不满足支付金额。最近,这种恶意软件出现了大规模的增长,并影响了全球近100个国家。本文提出了基于GURLS (Grand Unified regularization Least Square)的勒索软件检测方法,并对其进行分类。用于培训和测试的特性是应用程序编程接口(API)调用和字符串。本文比较了这些特征的分类性能和RBF核函数的分类效率。实验结果表明,使用RBF核具有更好的准确率。
Ransomware is a malware, which upon execution scrambles the framework and it denies the client from accessing the data until the point when a payoff sum is not met from the victim. Recently, this kind of malware has shown a massive growth and had affected nearly 100 nations around the globe. In this paper we propose GURLS (Grand Unified Regularized Least Square) based approach to detect ransomware and classify it into different categories. The features used for training and testing are application programming interface (API) invocations and strings. This paper compares the performance of each of these features for classification and the effectiveness of RBF Kernel. The results obtained shows that using RBF kernel gives better accuracy.