Rebuilding the Tower of Babel: Towards Cross-System Malware Information Sharing

摘要: Anti-virus systems developed by different vendors often demonstrate strong discrepancies in how they name malware, which signficantly hinders malware information sharing. While existing work has proposed a plethora of naming standards, most anti-virus were reluctant to change their own conventions. In this paper we explore new, more pragmatic alternative. We propose exploit the correlation between create consensus classification, through these can share without modifying Specifically present Latin, novel classification integration framework leveraging correspondence participating as reflected heterogeneous sources at instance-instance, instance-name, and name-name levels. provide results from extensive experimental studies using real datasets concrete use cases verify efficacy Latin supporting cross-system