Title | Forensic Malware Identification Using Naive Bayes Method |
Publication Type | Conference Paper |
Year of Publication | 2020 |
Authors | Ramadhan, Beno, Purwanto, Yudha, Ruriawan, Muhammad Faris |
Conference Name | 2020 International Conference on Information Technology Systems and Innovation (ICITSI) |
Date Published | oct |
Keywords | API Call Sequence, Containers, dynamic analysis, feature extraction, Human Behavior, machine learning, Malware, malware analysis, naive Bayes, Operating systems, Portable Executable, Predictive Metrics, privacy, pubcrawl, Resiliency, static analysis, Tools |
Abstract | Malware is a kind of software that, if installed on a malware victim's device, might carry malicious actions. The malicious actions might be data theft, system failure, or denial of service. Malware analysis is a process to identify whether a piece of software is a malware or not. However, with the advancement of malware technologies, there are several evasion techniques that could be implemented by malware developers to prevent analysis, such as polymorphic and oligomorphic. Therefore, this research proposes an automatic malware detection system. In the system, the malware characteristics data were obtained through both static and dynamic analysis processes. Data from the analysis process were classified using Naive Bayes algorithm to identify whether the software is a malware or not. The process of identifying malware and benign files using the Naive Bayes machine learning method has an accuracy value of 93 percent for the detection process using static characteristics and 85 percent for detection through dynamic characteristics. |
DOI | 10.1109/ICITSI50517.2020.9264959 |
Citation Key | ramadhan_forensic_2020 |