A malware detection model based on a negative selection algorithm with penalty factor

2010 ◽  
Vol 53 (12) ◽  
pp. 2461-2471 ◽  
Author(s):  
PengTao Zhang ◽  
Wei Wang ◽  
Ying Tan
Keyword(s):  
Negative Selection ◽  
Malware Detection ◽  
Selection Algorithm ◽  
Negative Selection Algorithm ◽  
Detection Model ◽  
Model Based ◽  
Penalty Factor

Windows Malware Detection Method Based on the Path IRP

2014 ◽  
Vol 687-691 ◽  
pp. 2626-2629
Author(s):  
Fu Yong Zhang
Keyword(s):  
Operating System ◽  
Positive Selection ◽  
Negative Selection ◽  
Detection Rate ◽  
Detection Method ◽  
Malware Detection ◽  
Experimental Results ◽  
Selection Algorithm ◽  
Negative Selection Algorithm ◽  
Request Sequence

Because the IRP (I/O Request Packets) sequences of programs are not identical in different environments in the same operating system, which have a certain influence on the detection results. Through a lot of experiments, we found that the IRP request sequences of programs on the same operation path are consistent. Therefore, the new malware detection method based on the path IRP sequences is proposed. Every single IRP request sequence on the same operation path is extracted, Negative Selection Algorithm (NSA) and Positive Selection Algorithm (PSA) are used for detection. Experimental results reveal that our method outperforms the method which based on IRP sequences in detection rate.

Sign in / Sign up

Export Citation Format

Share Document