Sparse Multinomial Logistic Regression: Fast Algorithms and Generalization Bounds.

Manage my Alerts New Citation Alert Please log in to your account.

Unlike the majority of this malware, Advanced Persistent Threat (APT) malware is created to target a specific network or set of networks and has a precise objective, e.g.

While 0-day malware detectors are a good start, they do not help the reverse engineers better understand the threats attacking their networks.

Understanding the behavior of malware is often a time sensitive task, and can take anywhere between several hours to several weeks.

Our goal is to automate the task of identifying the general function of the subroutines in the function call graph of the program to aid the reverse engineers.

Two approaches to model the subroutine labels are investigated, a multiclass Gaussian process and a multiclass support vector machine.

Promising initial results, illustrating the efficacy of this method, are presented on a sample of 201 subroutines taken from two malicious families.

Google Scholar Digital Library Blake Anderson, Curtis Storlie, and Terran Lane.

Improving Malware Classification: Bridging the StaticDynamic Gap.

In Proceedings of the Fifth ACM Workshop on Security and Artificial Intelligence, pages 3--14.

ACM, 2012. Google Scholar Digital Library Ulrich Bayer, Paolo Milani Comparetti, Clemens Hlauschek, Christopher Kruegel, and Engin Kirda.

In ISOC Network and Distributed System Security Symposium.

Google Scholar Daniel Bilar.

International Journal of Electronic Security and Digital Forensics, 1:156--168, 2007.

Google Scholar Digital Library Danilo Bruschi, Lorenzo Martignoni, and Mattia Monga.

Detecting Self-Mutating Malware using Control-Flow Graph Matching.

In Detection of Intrusions and Malware and Vulnerability Assessment, Lecture Notes in Computer Science, pages 129--143.

C. Burges. A Tutorial on Support Vector Machines for Pattern Recognition.

Google Scholar Digital Library Jianyong Dai, Ratan Guha, and Joohan Lee.

Efficient Virus Detection Using Dynamic Instruction Sequences.

Google Scholar Cross Ref Rainer Hettich and Kenneth Kortanek.

Semi-Infinite Programming: Theory, Methods, and Applications.

Google Scholar Digital Library Chih-Wei Hsu and Chih-Jen Lin.

A Comparison of Methods for Multiclass Support Vector Machines.

Google Scholar Digital Library IDA Pro, Accessed 17 September 2013.

Google Scholar Balaji Krishnapuram, Lawrence Carin, Mario AT Figueiredo, and Alexander J Hartemink.

Hex Rays Plw Google Scholars