Using Qualia and Multi-Layered Relationships in Malware Detection

被引:0
作者
Birrer, Bobby D.
Raines, Richard A.
Baldwin, Rusty O.
Oxley, Mark E.
Rogers, Steven K.
机构
来源
IEEE SYMPOSIUM ON COMPUTATIONAL INTELLIGENCE IN CYBER SECURITY | 2009年
关键词
D O I
暂无
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Detecting network intruders and malicious software is a significant problem for network administrators and security experts. New threats are emerging at an increasing rate, and current signature and statistics-based techniques are failing to keep pace. Intelligent systems that can adapt to new threats are needed to mitigate these new strains of malware as they are released. This research develops a system that uses contextual relationships and information across different layers of abstraction to detect malware based on its qualia, or essence. By looking for the underlying concepts that make a piece of software malicious, this system avoids the pitfalls of static solutions that focus on predefined signatures or anomaly thresholds. This type of qualia-based system provides a framework for developing intelligent classification and decision-making systems for any number of application areas.
引用
收藏
页码:91 / 98
页数:8
相关论文
共 15 条
  • [1] The Blaster worm: Then and now
    Bailey, M
    Cooke, E
    Jahanian, F
    Watson, D
    Nazario, J
    [J]. IEEE SECURITY & PRIVACY, 2005, 3 (04) : 26 - 31
  • [2] Bruschi D., 2006, C DET INTR MALW VULN
  • [3] Christodorescu M., 2005, Malware Normalization
  • [4] Christodorescu M., 2005, IEEE SEC PRIV S
  • [5] Christodorescu M, 2007, 6 JOINT M EUR SOFTW
  • [6] Hines M., 2007, INFOWORLD
  • [7] RECENT VIEWS OF CONCEPTUAL STRUCTURE
    KOMATSU, LK
    [J]. PSYCHOLOGICAL BULLETIN, 1992, 112 (03) : 500 - 526
  • [8] Krugel C., 2005, RAID
  • [9] Krugel C., 2007, BEHAV STRUCTURAL PRO
  • [10] LI W, 2007, 3 INT S INF ASS SEC