Improving malware detection by applying multi-inducer ensemble
Detection of malicious software (malware) using machine learning methods has been explored extensively to enable fast detection of new released malware. The performance of these classifiers depends on the induction algorithms being used. In order to benefit from multiple different classifiers, and exploit their strengths we suggest using an ensemble method that will combine the results of the individual classifiers into one final result to achieve overall higher detection accuracy. In this paper we evaluate several combining methods using five different base inducers (C4.5 Decision Tree, Naïve Bayes, KNN, VFI and OneR) on five malware datasets. The main goal is to find the best combining method for the task of detecting malicious files in terms of accuracy, AUC and Execution time.
Year of publication: |
2009
|
---|---|
Authors: | Menahem, Eitan ; Shabtai, Asaf ; Rokach, Lior ; Elovici, Yuval |
Published in: |
Computational Statistics & Data Analysis. - Elsevier, ISSN 0167-9473. - Vol. 53.2009, 4, p. 1483-1494
|
Publisher: |
Elsevier |
Saved in:
Saved in favorites
Similar items by person
-
Improving malware detection by applying multi-inducer ensemble Fe:160
Menahem, Eitan, (2009)
-
Analyzing group E-mail exchange to detect data leakage
Zilberman, Polina, (2013)
-
Detection of unknown computer worms based on behavioral classification of the host
Moskovitch, Robert, (2008)
- More ...