Adaptive Worm Detection Model Based on Multi Classifiers

作者: T. S. Barhoom , H. A. Qeshta

DOI: 10.1109/PICICT.2013.20

关键词:

摘要: Security has become ubiquitous in every area of malware newly emerging today pose a growing threat from ever perilous systems. As result to that, Worms are the upper part threats attacking computer system despite evolution worm detection techniques. Early unknown worms is still problem. In this paper, we proposed "WDMAC" model for worm's using data mining techniques by combination classifiers (Naive Bayes, Decision Tree, and Artificial Neural Network) multi be adaptive detecting known/ depending on behavior-anomaly approach, achieve higher accuracies rate, lower classification error rate. Our results show that achieved rates classification, where known at least 98.30%, with rate 1.70%, while about 97.99%, 2.01%.

参考文章(30)
Christos Douligeris, Dimitrios N Serpanos, None, Network Security: Current Status and Future Directions ,(2007)
Kwok Ho Law, Lam For Kwok, IDS false alarm filtering using KNN classifier workshop on information security applications. pp. 114- 121 ,(2004) , 10.1007/978-3-540-31815-6_10
Dursun Delen, David L. Olson, Advanced Data Mining Techniques ,(2008)
Mark A. Hall, Ian H. Witten, Eibe Frank, Data Mining: Practical Machine Learning Tools and Techniques ,(1999)
Christopher Kruegel, Fredrik Valeur, Giovanni Vigna, Intrusion Detection and Correlation: Challenges and Solutions ,(2004)
Dima Stopel, Yuval Elovici, Zvi Boger, Robert Moskovitch, Yuval Shahar, Improving Worm Detection with Artificial Neural Networks through Feature Selection and Temporal Analysis Techniques International Journal of Computer and Information Engineering. ,vol. 2, pp. 3185- 3191 ,(2008)
Mohammad Mannan, Paul C. van Oorschot, On instant messaging worms, analysis and countermeasures workshop on rapid malcode. pp. 2- 11 ,(2005) , 10.1145/1103626.1103629
Robert Moskovitch, Ido Gus, Shay Pluderman, Dima Stopel, Clint Feher, Chanan Glezer, Yuval Shahar, Yuval Elovici, Detection of Unknown Computer Worms Activity Based on Computer Behavior using Data Mining computational intelligence and data mining. pp. 202- 209 ,(2007) , 10.1109/CIDM.2007.368873