Title

Detecting malware evolution using support vector machines

Publication Date

4-1-2020

Document Type

Article

Department

Computer Science

Publication Title

Expert Systems with Applications

Volume

143

DOI

10.1016/j.eswa.2019.113022

Abstract

Malware families typically evolve over a period of time. Differences between malware samples within a single family can originate from various code modifications designed to evade detection, or changes that are made to alter the functionality of the malware itself. Thus, malware samples from the same family from different time periods can exhibit significantly different behavior. In this research, we apply feature ranking—based on linear support vector machine (SVM) weights—to identify changes within malware families. We analyze numerous malware families over extended periods of time. Our goal is to demonstrate that we can detect evolutionary changes within malware families using an automated and quantifiable machine learning based technique.

Keywords

Feature analysis, malware evolution, Malware, Support vector machine

Share

COinS