Visible to the public Trojan Traffic Detection Based on Machine Learning

TitleTrojan Traffic Detection Based on Machine Learning
Publication TypeConference Paper
Year of Publication2020
AuthorsMa, Zhongrui, Yuanyuan, Huang, Lu, Jiazhong
Conference Name2020 17th International Computer Conference on Wavelet Active Media Technology and Information Processing (ICCWAMTIP)
KeywordsClassification algorithms, composability, cyber physical security, cyber physical systems, Data models, feature extraction, machine learning, machine learning algorithms, Network behavior analysis, pubcrawl, random forests, resilience, Resiliency, supply chain security, Traffic analysis, Training, Trojan detection, trojan horse detection, Trojan horses
AbstractAt present, most Trojan detection methods are based on the features of host and code. Such methods have certain limitations and lag. This paper analyzes the network behavior features and network traffic of several typical Trojans such as Zeus and Weasel, and proposes a Trojan traffic detection algorithm based on machine learning. First, model different machine learning algorithms and use Random Forest algorithm to extract features for Trojan behavior and communication features. Then identify and detect Trojans' traffic. The accuracy is as high as 95.1%. Comparing the detection of different machine learning algorithms, experiments show that our algorithm has higher accuracy, which is helpful and useful for identifying Trojan.
DOI10.1109/ICCWAMTIP51612.2020.9317515
Citation Keyma_trojan_2020