Hardware implementation of negative selection algorithm for malware detection

2015 ◽  
Author(s):  
Zhaojun Lu ◽  
Gen Pei ◽  
Bojun Liu ◽  
Zhenglin Liu
Keyword(s):  
Negative Selection ◽  
Hardware Implementation ◽  
Malware Detection ◽  
Selection Algorithm ◽  
Negative Selection Algorithm

Windows Malware Detection Method Based on the Path IRP

2014 ◽  
Vol 687-691 ◽  
pp. 2626-2629
Author(s):  
Fu Yong Zhang
Keyword(s):  
Operating System ◽  
Positive Selection ◽  
Negative Selection ◽  
Detection Rate ◽  
Detection Method ◽  
Malware Detection ◽  
Experimental Results ◽  
Selection Algorithm ◽  
Negative Selection Algorithm ◽  
Request Sequence

Because the IRP (I/O Request Packets) sequences of programs are not identical in different environments in the same operating system, which have a certain influence on the detection results. Through a lot of experiments, we found that the IRP request sequences of programs on the same operation path are consistent. Therefore, the new malware detection method based on the path IRP sequences is proposed. Every single IRP request sequence on the same operation path is extracted, Negative Selection Algorithm (NSA) and Positive Selection Algorithm (PSA) are used for detection. Experimental results reveal that our method outperforms the method which based on IRP sequences in detection rate.

Sign in / Sign up

Export Citation Format

Share Document