Transforming Weakness into Strength: Improving Unreliable Malware Detection Methods

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F24%3A00139903" target="_blank" >RIV/00216224:14330/24:00139903 - isvavai.cz</a>
Result on the web
<a href="https://doi.org/https://doi.org/10.24138/jcomss-2024-0098" target="_blank" >https://doi.org/https://doi.org/10.24138/jcomss-2024-0098</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.24138/jcomss-2024-0098" target="_blank" >10.24138/jcomss-2024-0098</a>

Result language
angličtina
Original language name
Transforming Weakness into Strength: Improving Unreliable Malware Detection Methods
Original language description
This paper proposes a novel malware detection methodology that leverages unreliable Indicators of Compromise to enhance the identification of latent malware. The core contribution lies in introducing a sequence-based detection method that contextualizes unreliable IoCs to improve accuracy and reduce false positives. Unlike traditional methods reliant on predefined signatures or behavior analysis, this approach dynamically assesses system behaviors, focusing on suspicious actions and interaction patterns. Key contributions include a novel combination of unreliable IoCs with sequence alignment methods, an extensive mapping study of detection techniques, and initial experiments on a dataset of over 19,000 malware samples. Results demonstrate the method’s ability to cluster and identify malware families based on their behavioral signatures, even in its early developmental stage. This innovative approach shows promise for detecting previously unknown threats, establishing a foundation for advanced research in malware detection.
Czech name
—
Czech description
—

Type
J<sub>imp</sub> - Article in a specialist periodical, which is included in the Web of Science database
CEP classification
—
OECD FORD branch
20203 - Telecommunications

Project
<a href="/en/project/VK01030030" target="_blank" >VK01030030: Data backup and storage system with integrated active protection against cyber threats</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2024
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)