基于有效特征选择优化算法的非线性支持向量机木马检测模型

Ye Liang, Jingzhang Liang, Limei Huang, Yueping Xian
{"title":"基于有效特征选择优化算法的非线性支持向量机木马检测模型","authors":"Ye Liang, Jingzhang Liang, Limei Huang, Yueping Xian","doi":"10.1109/ITA.2013.38","DOIUrl":null,"url":null,"abstract":"There are two major issues in the current Trojan detection system: some of them can not detect unknown Trojans and many of them have low detection rate. To solve these problems, a Trojan horse detection model of nonlinear SVM based on an effective feature selection optimization algorithm is presented in this paper. In this model, we extract the API (application program interface) calls sequence of an executable program as a feature vector and use the feature selection optimization algorithm to choose High-sensitive characteristics which are quantized into data recognized by SVM to build the SVM feature vector library. SVM classifier is trained with the training dataset to find the optimal separating hyper plane. Experiment results demonstrate that this model named PMI-SVM is more effective and steady.","PeriodicalId":285687,"journal":{"name":"2013 International Conference on Information Technology and Applications","volume":"33 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2013-11-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Trojan Detection Model of Nonlinear SVM Based on an Effective Feature Selection Optimization Algorithm\",\"authors\":\"Ye Liang, Jingzhang Liang, Limei Huang, Yueping Xian\",\"doi\":\"10.1109/ITA.2013.38\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"There are two major issues in the current Trojan detection system: some of them can not detect unknown Trojans and many of them have low detection rate. To solve these problems, a Trojan horse detection model of nonlinear SVM based on an effective feature selection optimization algorithm is presented in this paper. In this model, we extract the API (application program interface) calls sequence of an executable program as a feature vector and use the feature selection optimization algorithm to choose High-sensitive characteristics which are quantized into data recognized by SVM to build the SVM feature vector library. SVM classifier is trained with the training dataset to find the optimal separating hyper plane. Experiment results demonstrate that this model named PMI-SVM is more effective and steady.\",\"PeriodicalId\":285687,\"journal\":{\"name\":\"2013 International Conference on Information Technology and Applications\",\"volume\":\"33 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2013-11-16\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2013 International Conference on Information Technology and Applications\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ITA.2013.38\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 International Conference on Information Technology and Applications","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ITA.2013.38","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

摘要

目前的木马检测系统主要存在两大问题:一部分无法检测到未知的木马,很多木马的检测率很低。为了解决这些问题,本文提出了一种基于有效特征选择优化算法的非线性支持向量机特洛伊木马检测模型。在该模型中,我们提取可执行程序的API(应用程序接口)调用序列作为特征向量,并使用特征选择优化算法选择高敏感特征,将其量化为支持向量机识别的数据,构建支持向量机特征向量库。利用训练数据集对SVM分类器进行训练,寻找最优分离超平面。实验结果表明,该模型具有较好的稳定性和有效性。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Trojan Detection Model of Nonlinear SVM Based on an Effective Feature Selection Optimization Algorithm
There are two major issues in the current Trojan detection system: some of them can not detect unknown Trojans and many of them have low detection rate. To solve these problems, a Trojan horse detection model of nonlinear SVM based on an effective feature selection optimization algorithm is presented in this paper. In this model, we extract the API (application program interface) calls sequence of an executable program as a feature vector and use the feature selection optimization algorithm to choose High-sensitive characteristics which are quantized into data recognized by SVM to build the SVM feature vector library. SVM classifier is trained with the training dataset to find the optimal separating hyper plane. Experiment results demonstrate that this model named PMI-SVM is more effective and steady.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信