{"title":"使用协同进化算法的变形恶意软件分类","authors":"Zahra Bazrafshan, A. Hamzeh","doi":"10.1109/IKT.2015.7288668","DOIUrl":null,"url":null,"abstract":"Malware is a malicious code which intends to harm computers and networks. As malware attacks become pervasive, the security policy of computers is more critical and it is so important to have a well-defined process to detect malware. However to avoid detection of the malware, various concealment strategies are invented regularly. Metamorphism is a strategy in which malware change their codes on each infection, meanwhile keeping the functionality unchanged. We focus on these types of malware due to their complex behaviors. In this work we concentrate on Visual Basic Script (VBS) malware and propose a detection mechanism for metamorphic malware. Regarding the great ability of evolutionary algorithms, here, we employ a Co-evolutionary-based architecture to tackle the graph isomorphism problem to be able to detection metamorphic malware based on their semantic graph. The experimental results confirm the efficiency of the proposed method regarding other state of the art ones in the literature.","PeriodicalId":338953,"journal":{"name":"2015 7th Conference on Information and Knowledge Technology (IKT)","volume":"100 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2015-05-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":"{\"title\":\"Metamorphic malware categorization using co-evolutionary algorithm\",\"authors\":\"Zahra Bazrafshan, A. Hamzeh\",\"doi\":\"10.1109/IKT.2015.7288668\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Malware is a malicious code which intends to harm computers and networks. As malware attacks become pervasive, the security policy of computers is more critical and it is so important to have a well-defined process to detect malware. However to avoid detection of the malware, various concealment strategies are invented regularly. Metamorphism is a strategy in which malware change their codes on each infection, meanwhile keeping the functionality unchanged. We focus on these types of malware due to their complex behaviors. In this work we concentrate on Visual Basic Script (VBS) malware and propose a detection mechanism for metamorphic malware. Regarding the great ability of evolutionary algorithms, here, we employ a Co-evolutionary-based architecture to tackle the graph isomorphism problem to be able to detection metamorphic malware based on their semantic graph. The experimental results confirm the efficiency of the proposed method regarding other state of the art ones in the literature.\",\"PeriodicalId\":338953,\"journal\":{\"name\":\"2015 7th Conference on Information and Knowledge Technology (IKT)\",\"volume\":\"100 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2015-05-26\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"2\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2015 7th Conference on Information and Knowledge Technology (IKT)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/IKT.2015.7288668\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2015 7th Conference on Information and Knowledge Technology (IKT)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IKT.2015.7288668","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Metamorphic malware categorization using co-evolutionary algorithm
Malware is a malicious code which intends to harm computers and networks. As malware attacks become pervasive, the security policy of computers is more critical and it is so important to have a well-defined process to detect malware. However to avoid detection of the malware, various concealment strategies are invented regularly. Metamorphism is a strategy in which malware change their codes on each infection, meanwhile keeping the functionality unchanged. We focus on these types of malware due to their complex behaviors. In this work we concentrate on Visual Basic Script (VBS) malware and propose a detection mechanism for metamorphic malware. Regarding the great ability of evolutionary algorithms, here, we employ a Co-evolutionary-based architecture to tackle the graph isomorphism problem to be able to detection metamorphic malware based on their semantic graph. The experimental results confirm the efficiency of the proposed method regarding other state of the art ones in the literature.