作者: O-chul Kwon , Seong-jae Bae , Jae-ik Cho , Jung-sub Moon , None
DOI:
关键词: Detection rate 、 Data mining 、 Population data 、 Fuzzy clustering 、 Native API 、 Authentication 、 Computer science 、 Supervised learning 、 System call
摘要: The Native API is a system call which can only be accessed with the authentication of administrator. It used to detect variety malicious codes executed administrator's authority. Therefore, much research being done on detection methods using characteristics API. Most these researches are by supervised learning machine learning. However, classification standards Anti-Virus companies do not reflect As result population data in accurate. more needed topic for detection. This paper proposes method re-grouping fuzzy clustering standard. accuracy proposed uses compare rates previous classifying evaluation.