Malware detection through machine learning techniques

• 主要な著者: Amer, Ahmed, Abdul Aziz, Normaziah
• フォーマット: 論文
• 言語: English
• 出版事項: The World Academy of Research in Science and Engineering 2019
• 主題: QA75 Electronic computers. Computer science; QA76 Computer software
• オンライン･アクセス: http://irep.iium.edu.my/76535/1/76535_Malware%20detection%20through%20machine.pdf; http://irep.iium.edu.my/76535/; http://www.warse.org/IJATCSE/static/pdf/file/ijatcse82852019.pdf

Malware attack is a never-ending cyber security issue. Since traditional approaches are less efficient in detecting newly appeared malware, researchers are applying machine learning methods. In this research we started by an overview of the domain and went over available malware datasets. Then we discussed disadvantages of traditional Anti-Malware methods and reviewed possible Machine Learning techniques used in this domain. A study on EMBER dataset has been made with an objective of improving the baseline Gradient Boosted Decision Tree model by optimizing its hyper-parameter and eliminating noisy features from the dataset. EMBER dataset consists of 1.1M observations of static features extracted from executable files. Our optimized model has achieved 99.38% accuracy with 0.004 false positive rate in 7 minutes running time. We conclude that Machine Learning techniques are practical to be applied as anti-malware solutions including for Zero-day attacks.