Application of Hybrid Machine Learning to Detect and Remove Malware

Apply

Application of Hybrid Machine Learning to Detect and Remove Malware

Journal Title: Transactions on Machine Learning and Artificial Intelligence - Year 2015, Vol 3, Issue 4

Abstract

Anti-malware software traditionally employ methods of signature-based and heuristic-based detection. These detection systems need to be manually updated with new behaviors to detect new, unknown, or adapted malware. Our goal is to create a new malware detection solution that will serve three purposes: to automatically identify and classify unknown files on a spectrum of malware severity; to introduce a hybrid machine learning approach to detect modified malware traces; and to increase the accuracy of detection results. Our solution is accomplished through the use of data mining and machine learning concepts and algorithms. We perform two types of data mining on samples, extracting n-grams and PE features that are used for our machine learning environment. We also introduce a new hybrid learning approach that utilizes both supervised and unsupervised machine learning in a two-layer protocol. A supervised algorithm is applied to classify if a file is considered malware or benign. The files classified as malware will then be categorized and then assigned on a severity spectrum using the SOFM unsupervised algorithm.

Authors and Affiliations

Richard R. Yang, Victor Kang, Sami Albouq, Mohamed Zohdy

Keywords

EP ID EP278831
DOI 10.14738/tmlai.34.1436
Views 67
Downloads 0