Huizhong Sun1, Guosheng Xu1,*, Hewei Yu2, Minyan Ma3, Yanhui Guo1, Ruijie Quan4
Journal of Quantum Computing, Vol.3, No.2, pp. 55-63, 2021, DOI:10.32604/jqc.2021.017365
Abstract Language detection models based on system calls suffer from certain
false negatives and detection blind spots. Hence, the normal behavior sequences of
some malware applications for a short period can become malicious behavior
within a certain time window. To detect such behaviors, we extract a
multidimensional time distribution feature matrix on the basis of statistical analysis.
This matrix mainly includes multidimensional time distribution features,
multidimensional word pair correlation features, and multidimensional word
frequency distribution features. A multidimensional time distribution model based
on neural networks is built to detect the overall abnormal behavior within a given
time window. Experimental evaluation is… More >