An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model

Polymorphic worms are considered as the most dangerous threats to the Internet security, and the danger lies in changing their payloads in every infection attempt to avoid the security systems. In this paper, we propose an accurate signature generation system for zero-day polymorphic worms. We have...

Full description

Bibliographic Details
Main Authors:	Mohammed, Mohssen M. Z. E., Chan, H. Anthony, Ventura , Neco, Pathan, Al-Sakib Khan
Format:	Conference or Workshop Item
Language:	English English English English
Published:	2013
Subjects:	QA75 Electronic computers. Computer science
Online Access:	http://irep.iium.edu.my/33752/ http://irep.iium.edu.my/33752/ http://irep.iium.edu.my/33752/1/2_Sub_ACSAT_MohssenFinal_-_latest.pdf http://irep.iium.edu.my/33752/2/Gmail_-_ACSAT_2013_notification_for_paper_102.pdf http://irep.iium.edu.my/33752/3/ACSAT%2713_-_Schedule_V3.pdf http://irep.iium.edu.my/33752/11/33752.pdf

id	iium-33752
recordtype	eprints
spelling	iium-337522015-02-20T09:20:47Z http://irep.iium.edu.my/33752/ An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model Mohammed, Mohssen M. Z. E. Chan, H. Anthony Ventura , Neco Pathan, Al-Sakib Khan QA75 Electronic computers. Computer science Polymorphic worms are considered as the most dangerous threats to the Internet security, and the danger lies in changing their payloads in every infection attempt to avoid the security systems. In this paper, we propose an accurate signature generation system for zero-day polymorphic worms. We have designed a novel Double-honeynet system, which is able to detect zero-day polymorphic worms that have not been seen before. To generate signatures for polymorphic worms we have two steps. The first step is the polymorphic worms sample collection which is done by the Double-honeynet system. The second step is the signature generation for the collected samples which is done by k-means clustering algorithm and a Multilayer Perceptron Model. The system collects different types of polymorphic worms; we used the k-means clustering algorithm to separate each type into a cluster. The Multilayer Perceptron Model is used to generate signatures for each cluster. The main goal for this system is to reduce the false positives and false negatives. 2013 Conference or Workshop Item PeerReviewed application/pdf en http://irep.iium.edu.my/33752/1/2_Sub_ACSAT_MohssenFinal_-_latest.pdf application/pdf en http://irep.iium.edu.my/33752/2/Gmail_-_ACSAT_2013_notification_for_paper_102.pdf application/pdf en http://irep.iium.edu.my/33752/3/ACSAT%2713_-_Schedule_V3.pdf application/pdf en http://irep.iium.edu.my/33752/11/33752.pdf Mohammed, Mohssen M. Z. E. and Chan, H. Anthony and Ventura , Neco and Pathan, Al-Sakib Khan (2013) An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model. In: 2nd International Conference on Advanced Computer Science Applications and Technologies (ACSAT2013), 22-24 December 2013, Kuching, Sarawak, Malaysia. http://dsr-conferences.com/acsat/index.php
repository_type	Digital Repository
institution_category	Local University
institution	International Islamic University Malaysia
building	IIUM Repository
collection	Online Access
language	English English English English
topic	QA75 Electronic computers. Computer science
spellingShingle	QA75 Electronic computers. Computer science Mohammed, Mohssen M. Z. E. Chan, H. Anthony Ventura , Neco Pathan, Al-Sakib Khan An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
description	Polymorphic worms are considered as the most dangerous threats to the Internet security, and the danger lies in changing their payloads in every infection attempt to avoid the security systems. In this paper, we propose an accurate signature generation system for zero-day polymorphic worms. We have designed a novel Double-honeynet system, which is able to detect zero-day polymorphic worms that have not been seen before. To generate signatures for polymorphic worms we have two steps. The first step is the polymorphic worms sample collection which is done by the Double-honeynet system. The second step is the signature generation for the collected samples which is done by k-means clustering algorithm and a Multilayer Perceptron Model. The system collects different types of polymorphic worms; we used the k-means clustering algorithm to separate each type into a cluster. The Multilayer Perceptron Model is used to generate signatures for each cluster. The main goal for this system is to reduce the false positives and false negatives.
format	Conference or Workshop Item
author	Mohammed, Mohssen M. Z. E. Chan, H. Anthony Ventura , Neco Pathan, Al-Sakib Khan
author_facet	Mohammed, Mohssen M. Z. E. Chan, H. Anthony Ventura , Neco Pathan, Al-Sakib Khan
author_sort	Mohammed, Mohssen M. Z. E.
title	An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
title_short	An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
title_full	An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
title_fullStr	An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
title_full_unstemmed	An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
title_sort	automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model
publishDate	2013
url	http://irep.iium.edu.my/33752/ http://irep.iium.edu.my/33752/ http://irep.iium.edu.my/33752/1/2_Sub_ACSAT_MohssenFinal_-_latest.pdf http://irep.iium.edu.my/33752/2/Gmail_-_ACSAT_2013_notification_for_paper_102.pdf http://irep.iium.edu.my/33752/3/ACSAT%2713_-_Schedule_V3.pdf http://irep.iium.edu.my/33752/11/33752.pdf
first_indexed	2023-09-18T20:48:49Z
last_indexed	2023-09-18T20:48:49Z
_version_	1777409856046628864

An automated signature generation method for zero-day polymorphic worms based on multilayer perceptron model

Similar Items