Год выпуска: 2013 Автор: Fadel O. Shaban Издательство: LAP Lambert Academic Publishing Страниц: 92 ISBN: 9783659488832
Описание
Malware represents a significant problem that threatens the security of computer systems. Spyware is one of the recent types of malware that represents a serious threat to confidentiality. The traditional approaches using signature-based to detect spyware programs fails in detecting new and unknown spyware. Many of the malware detection techniques which work well in detecting malware are not investigated in terms of spyware detection. In this research, we investigate the spyware detection by using data mining techniques based on mining Application Programming Interface (API) calls. 2084 spyware and 1065 benign windows Portable Executable (PE) file samples were collected in order to create binary data set. API call statically extracted from binary file, then generate a set of features and features selection was performed, these features are then used to train a classifier. We evaluated a variety of classification algorithms. The accuracy and the area under ROC curve are used for the...
