DMCA
N-Grams-based file signatures for malware detection
| Venue: | in: Proceedings of the 2009 International Conference on Enterprise Information Systems (ICEIS), Volume AIDSS |
| Citations: | 10 - 4 self |
BibTeX
@INPROCEEDINGS{Santos_n-grams-basedfile,
author = {Igor Santos and Yoseba K. Penya and Jaime Devesa and Pablo G. Bringas},
title = {N-Grams-based file signatures for malware detection},
booktitle = {in: Proceedings of the 2009 International Conference on Enterprise Information Systems (ICEIS), Volume AIDSS},
year = {},
pages = {317--320}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract: Malware is any malicious code that has the potential to harm any computer or network. The amount of malware is increasing faster every year and poses a serious security threat. Thus, malware detection is a critical topic in computer security. Currently, signature-based detection is the most extended method for detecting malware. Although this method is still used on most popular commercial computer antivirus software, it can only achieve detection once the virus has already caused damage and it is registered. Therefore, it fails to detect new malware. Applying a methodology proven successful in similar problem-domains, we propose the use of n-grams (every substring of a larger string, of a fixed lenght n) as file signatures in order to detect unknown malware whilst keeping low false positive ratio. We show that n-grams signatures provide an effective way to detect unknown malware. 1
Keyphrases
malware detection n-grams-based file signature unknown malware fixed lenght new malware file signature effective way popular commercial computer antivirus software serious security threat n-grams signature similar problem-domains signature-based detection positive ratio computer security critical topic extended method malicious code
