Abstract
Considering the fact that the determination of the executable file maliciousness is hard to achieve,an approach based on the evidence theory is presented in this paper.First,a model for determining the maliciousness is established.Then characters compromising security are extracted to construct the set of program behaviors through decompiling the program.The model is trained using the BP neural network to gain the basic probability assignment functions(BPAF) of each behavior,and the weighted sum method is applied to combine the program behaviors,determining the executable file maliciousness.Experimental results demonstrate the validity of the approach which uses the evidence theory to determine the maliciousness of program.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
