Review of Contemporary Literature on Machine Learning based Malware Analysis and Detection Strategies

§ KMIT/JNTUH
‡ Jawaharlal nehru university - Hyderabad

Send Message

To: Author

Review of Contemporary Literature on Machine Learning based Malware Analysis and Detection Strategies

Article Fingerprint

ReserarchID

CSTIUC9F

Review of Contemporary Literature on Machine Learning based Malware Analysis and Detection Strategies Banner

Key Research Insights

Synthesized scholarly intelligence & interactive research assistant
  • English
  • Afrikaans
  • Albanian
  • Amharic
  • Arabic
  • Armenian
  • Azerbaijani
  • Basque
  • Belarusian
  • Bengali
  • Bosnian
  • Bulgarian
  • Catalan
  • Cebuano
  • Chichewa
  • Chinese (Simplified)
  • Chinese (Traditional)
  • Corsican
  • Croatian
  • Czech
  • Danish
  • Dutch
  • Esperanto
  • Estonian
  • Filipino
  • Finnish
  • French
  • Frisian
  • Galician
  • Georgian
  • German
  • Greek
  • Gujarati
  • Haitian Creole
  • Hausa
  • Hawaiian
  • Hebrew
  • Hindi
  • Hmong
  • Hungarian
  • Icelandic
  • Igbo
  • Indonesian
  • Irish
  • Italian
  • Japanese
  • Javanese
  • Kannada
  • Kazakh
  • Khmer
  • Korean
  • Kurdish (Kurmanji)
  • Kyrgyz
  • Lao
  • Latin
  • Latvian
  • Lithuanian
  • Luxembourgish
  • Macedonian
  • Malagasy
  • Malay
  • Malayalam
  • Maltese
  • Maori
  • Marathi
  • Mongolian
  • Myanmar (Burmese)
  • Nepali
  • Norwegian
  • Pashto
  • Persian
  • Polish
  • Portuguese
  • Punjabi
  • Romanian
  • Russian
  • Samoan
  • Scots Gaelic
  • Serbian
  • Sesotho
  • Shona
  • Sindhi
  • Sinhala
  • Slovak
  • Slovenian
  • Somali
  • Spanish
  • Sundanese
  • Swahili
  • Swedish
  • Tajik
  • Tamil
  • Telugu
  • Thai
  • Turkish
  • Ukrainian
  • Urdu
  • Uzbek
  • Vietnamese
  • Welsh
  • Xhosa
  • Yiddish
  • Yoruba
  • Zulu
Reading Preferences
Font Size
Line Spacing
Background
This converted HTML version may contain rendering inconsistencies. Please refer to the PDF for the authoritative version, or click here to provide feedback.

Abstract

Malicious software also known as malware are the critical security threat experienced by the current ear of internet and computer system users. The malwares can morph to access or control the system level operations in multiple dimensions. The traditional malware detection strategies detects by signatures, which are not capable to notify the unknown malwares. The machine learning models learns from the behavioral patterns of the existing malwares and attempts to notify the malwares with similar behavioral patterns, hence these strategies often succeeds to notify even about unknown malwares. This manuscript explored the detailed review of machine learning based malware detection strategies found in contemporary literature.

References

61 Cites in Article
  1. 1. (2016). Références Referencias. Références Referencias, 14
  2. 2. Gary Mcgraw,Greg Morrisett (2000). Attacking Malicious Code: A Report to the Infosec Research Council. IEEE Software, 17(5), 33-41.
  3. 3. L Xufang,P Loh,F Tan (2011). Mechanisms of Polymorphic and Metamorphic Viruses. Intelligence and Security Informatics Conference (EISIC)
  4. 4. (2013). Unknown Title. Threats Predictions
  5. 5. R Berkenkopf (2010). Unknown Title.
  6. 6. Y Ye (2009). Intelligent file scoring system for malware detection from the gray list. Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining, 1385-1394.
  7. 7. K Rieck (2012). Malheur A novel tool for malware analysis. Malheur A novel tool for malware analysis
  8. 8. Cristian Pinzón,Juan De Paz,Dante Tapia,Javier Bajo,Juan Corchado (2012). Improving the security level of the FUSION@ multi-agent architecture. Expert Systems with Applications, 39(8), 7536-7545.
  9. 9. Ammar Ahmed,E Elhadi,M Maarof,A Osman (2012). Malware Detection Based on Hybrid Signature Behaviour Application Programming Interface Call Graph. American Journal of Applied Sciences, 9(3), 283-288.
  10. 10. P Kevadia Kaushal,Nilesh Prajapati (2012). Metamorphic Malware Detection Using Statistical Analysis. International Journal of Soft Computing and Engineering (IJSCE), 2(3)
  11. 11. T Yanfang Ye,Weiwei Shenghuo Zhu,Zhuang,Umesh Egementas,Melihabdulhayoglu Gupta (2011). Combining file content and file relations for cloud based malware detection. Proceedings of the 17th ACM SIGKDD international conference on Knowledge discovery and data mining, 222-230.
  12. 12. M Christodorescu,S Jha,S Seshia,D Song,R Bryant (2005). Semantics-aware malware detection. 2005 IEEE Symposium on Security and Privacy (S&P'05), 32-46.
  13. 13. H Yin (2007). Panorama: capturing systemwide information flow for malware detection and analysis. Proceedings of the 14th ACM conference on Computer and communications security, 116-127.
  14. 14. P Vinod (2009). Survey on Malware Detection Methods. Survey on Malware Detection Methods
  15. 15. L Zeltser,X Jiang,X Wang,D Xu (2007). what is cloud Anti-Virus and how it does work. Stealthy malware detection through vmm-based "outof-the-box" semantic view reconstruction, in Computer and communications security, 128-138.
  16. 16. (2007). Automated dynamic binary analysis. Automated dynamic binary analysis
  17. 17. Deepak Venugopal,G (2008). Efficient signature based malware detection on mobile devices. Mob. Inf. Syst, 4(1), 33-49.
  18. 18. C Kolbitsch (2009). Effective and efficient malware detection at the end host. Proceedings of the 18th conference on USENIX security symposium, 351-366.
  19. 19. S Zhou (2009). A Heuristic Approach for Detection of Obfuscated Malware. IEEE, 20.
  20. 20. M Ahmed (2009). NIDS: A Network Based Approach to Intrusion Detection and Prevention. Computer Science and Information Technology -Spring Conference
  21. 21. Tal Garfinkel,Ben Pfaff,Jim Chow,Mendel Rosenblum,Dan Boneh (2003). Terra. Proceedings of the nineteenth ACM symposium on Operating systems principles, 193-206.
  22. 22. H Lagar-Cavilla (2009). Flexible Computing with Virtual Machines. Flexible Computing with Virtual Machines
  23. 23. V Gorodetsky (2007). Multi-agent Peer-to-Peer Intrusion Detection Computer Network Security. Multi-agent Peer-to-Peer Intrusion Detection Computer Network Security, 260-271.
  24. 24. Xiao-Ling Ye,Ying-Chao Zhang,Chao-Long Zhang,Chao Chen,Xin-Yi Huang (2009). A Mobile Agent and Snort Based Distributed Intrusion Detection System. 2009 WRI World Congress on Software Engineering, 281-285.
  25. 25. C. -M Ou,C Ou (2010). Agent-Based immunity for computer virus: abstraction from dendritic cell algorithm with danger theory. Proceedings of the 5th international conference on Advances in Grid and Pervasive Computing, 670-678.
  26. 26. S Bijani,D Robertson (2011). Intrusion detection in open peer-to-peer multi-agent systems. Proceedings of the 5 th international conference on Autonomous infrastructure, management, and security: managing the dynamics of networks and services, 177-180.
  27. 27. H Dong (2011). Research on adaptive distributed intrusion detection system model based on Multi-Agent. Research on adaptive distributed intrusion detection system model based on Multi-Agent
  28. 28. C Ou (2011). Multiagent-based computer virus detection systems: abstraction from dendritic cell algorithm with danger theory. Springerlink
  29. 29. Paritosh Das,Rajdeep Niyogi (2012). A Temporal Logic Based Approach to Multi-Agent Intrusion Detection and Prevention. International Journal of Communication Networks and Security, 53-61.
  30. 30. C Moser,E Kruegel,Kirda (2007). Limits of static analysis for malware detection. Proceedings of the 23rd Annual Computer Security Applications Conference (ACSAC '07), 421-430.
  31. 31. P Okane,S Sezer,K Mclaughlin (2011). Obfuscation: the hidden malware. Global Journal of Computer Science and Technology, 9(5), 41-47.
  32. 32. Silvio Cesare,Yang Xiang (2012). Software Similarity Searching and Classification. SpringerBriefs in Computer Science, 71-75.
  33. 33. M Rajagopalan,M Hiltunen,T Jim,R Schlichting (2006). System call monitoring using authenticated system calls. IEEE Transactions on Dependable and Secure Computing, 3(3), 216-229.
  34. 34. M Abadi,M Budiu,U Erlingsson,J Ligatti (2005). Control-´flow integrity. Proceedings of the 12th ACM Conference on Computer and Communications Security, 340-353.
  35. 35. V Sathyanarayan,Pankaj Kohli,Bezawada Bruhadeshwar (2008). Signature Generation and Detection of Malware Families. Lecture Notes in Computer Science, 336-349.
  36. 36. B Sami,H Yadegari,N Rahimi,S Peiravian,A Hashemi,Hamze (2010). Malware detection based on mining API calls. Proceedings of the 25th Annual ACM Symposium on Applied Computing (SAC '10), 1020-1025.
  37. 37. Y Ye,D Wang,T Li,D Ye (2007). IMDS: intelligent malware detection system. Proceedings of the 13th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, 1043-1047.
  38. 38. M Alazab,S Venkatraman,P Watters (2011). Zeroday malware detection based on supervised learning algorithms of API call signatures. Proceedings of the 9 th Australasian Data Mining Conference (AusDM '11), 121, 171-182.
  39. 39. Ronghua Tian,Rafiqul Islam,Lynn Batten,Steve Versteeg (2010). Differentiating malware from cleanware using behavioural analysis. 2010 5th International Conference on Malicious and Unwanted Software, 23-30.
  40. 40. M Shankarapani,K Kancherla,S Ramammoorthy,R Movva,S Mukkamala (2010). Kernel machines for malware classification and similarity analysis. The 2010 International Joint Conference on Neural Networks (IJCNN), 1-6.
  41. 41. M Shankarapani,S Ramamoorthy,R Movva,S Mukkamala (2011). Malware detection using assembly and API call sequences. Journal in Computer Virology, 7(2), 107-119.
  42. 42. F Ahmed,H Hameed,M Shafiq,M Farooq (2009). Using spatiotemporal linformationin API call swithmachinelea rning algorithms for malware detection. Proceedings of the 2nd ACM Workshop on Security and Artificial Intelligence, 55-62.
  43. 43. Yong Qiao,Yuexiang Yang,Jie He,Chuan Tang,Zhixue Liu (2014). CBM: Free, Automatic Malware Analysis Framework Using API Call Sequences. Advances in Intelligent Systems and Computing, 225-236.
  44. 44. Y Qiao,Y Yang,L Ji,He (2013). Analyzing malware by abstracting the frequent item sets in API call sequences. Proceedings of the 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom '13), 265-270.
  45. 45. J Bergeron,M Debbabi,J Desharnais,M Erhioui,Y Lavoie,N Tawbi (2001). Static detection of malicious code in executable programs. Proceedings of the Symposium on Requirements Engineering for Information Security (SREIS '01)
  46. 46. J. -W Jang,J Woo,J Yun,H Kim (2014). Malnetminer: malware classification based on social network analysis of call graph. Proceedings of the Companion Publication of the 23rd International Conference on World Wide Web Companion (WWW Companion '14), 731-734.
  47. 47. Konrad Rieck,Philipp Trinius,Carsten Willems,Thorsten Holz (2011). Automatic analysis of malware behavior using machine learning. Journal of Computer Security, 19(4), 639-668.
  48. 48. C Linn,M Rajagopalan,S Baker,C Collberg,S Debray,J Hartman (2005). Protecting against unexpected system calls. Proceedings of the 14th USENIX Security Symposium, 239-254.
  49. 49. Blake Anderson,Daniel Quist,Joshua Neil,Curtis Storlie,Terran Lane (2011). Graph-based malware detection using dynamic analysis. Journal in Computer Virology, 7(4), 247-258.
  50. 50. U Bayer,P Comparetti,C Hlauschek,C Kruegel (2009). Scalable, Behavior-Based Malware Clustering. Proceedings of the 16th Annual Network and Distributed System Security Symposium
  51. 51. (null). Papio anubis Olive Baboon (Anubis Baboon) : Fr. Babouin Doguera; Ger. Anubispavian. Mammals of Africa : Primates
  52. 52. P Indyk,R Motwani (1998). Approximate Nearest Neighbor: Towards Removing the Curse of Dimensionality. Proceedings of 30th Annual ACM Symposium on Theory of Computing, 604-613.
  53. 53. M Biley,J Oberheid,J Andersen,Z Morley Mao,F Jahanian,J Nazario (2007). Automated Classification and Analysis of Internet Malware. Proceedings of the 10 th International Conference on Recent Advances in Intrusion Detection, 4637, 178-197.
  54. 54. Y Park,D Reeves,V Mulukutla,B Sundaravel (2010). Fast Malware Classification by Automated Behavioral Graph Matching. Proceedings of the 6th Annual Workshop on Cyber Security and Information Intelligence Research, 45.
  55. 55. I Firdausi,C Lim,A Erwin (2010). Analysis of Machine Learning Techniques Used in Behavior Based Malware Detection. Proceedings of 2nd International Conference on Advances in Computing, Control and Telecommunication Technologies (ACT), 201-203.
  56. 56. S Nari,A Ghorbani (2013). Automated malware classification based on network behavior. 2013 International Conference on Computing, Networking and Communications (ICNC), 642-647.
  57. 57. M Hall,E Frank,G Holmes,B Pfahringer,P Reutemann,I Witten (2009). The WEKA Data Mining Software: An Update. ACM SIGKDD Explorations Newsletter, 10-18.
  58. 58. T Lee,J Mody (2006). Proceedings of the 2006 annual research conference of the South African institute of computer scientists and information technologists on IT research in developing couuntries - SAICSIT '06. Proceedings of the European Institute for Computer Antivirus Research Conference (EICAR'06)
  59. 59. I Santos,J Devesa,F Brezo,J Nieves,P Bringas (2013). OPEM: A Static-Dynamic Approach for Machine Learning Based Malware Detection. Proceedings of International Conference CISIS'12-ICEUTE'12, Special Sessions Advances in Intelligent Systems and Computing, 189, 271-280.
  60. 60. R Islam,R Tian,L Battenb,S Versteeg (2013). Classification of Malware Based on Integrated Static and Dynamic Features. Journal of Network and Computer Application, 36, 646-556.
  61. 61. Blake Anderson,Curtis Storlie,Terran Lane (2012). Improving malware classification. Proceedings of the 5th ACM workshop on Security and artificial intelligence, 3-14.

Funding

No external funding was declared for this work.

Conflict of Interest

The authors declare no conflict of interest.

Ethical Approval

No ethics committee approval was required for this article type.

Data Availability

Not applicable for this article.

How to Cite This Article

G. Bala Krishna, V. Radha, K. Venugopala Rao. 2016. "Review of Contemporary Literature on Machine Learning based Malware Analysis and Detection Strategies". Global Journal of Computer Science and Technology GJCST-E Volume 16 (GJCST Volume 16 Issue E5).

More Citation Formats

Download Citation

Journal Specifications

Crossref Journal DOI 10.17406/gjcst

Print ISSN 0975-4350

e-ISSN 0975-4172

Keywords
Classification
GJCST-E Classification C.2.0
D.4.6
H.2.7
Version of record

v1.2

Issue date
July 19, 2016

Language
English
Order Article Reprint
Experience in AR

Explore published articles in an immersive Augmented Reality environment. Our platform converts research papers into interactive 3D books, allowing readers to view and interact with content using AR and VR compatible devices.

Read in 3D

Your published article is automatically converted into a realistic 3D book. Flip through pages and read research papers in a more engaging and interactive format.

Article Matrices
Total Views: 1.5K
Total Downloads: 130
All Trends

Request Access

Please fill out the form below to request access to this research paper. Your request will be reviewed by the editorial or author team.
X

This is the heading

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

High-quality academic research articles on global topics and journals.

Review of Contemporary Literature on Machine Learning based Malware Analysis and Detection Strategies

G. Krishna
G. Krishna KMIT/JNTUH
V. Radha
V. Radha <p>KMIT/JNTUH</p>
K. Rao
K. Rao <p>Jawaharlal nehru university – Hyderabad</p>