摘要
采用数据挖掘技术检测恶意代码,提出一种基于加权信息增益的特征选择方法。该方法综合考虑特征频率和信息增益的作用,能够更加准确地选取有效特征,从而提高检测性能。实现一个恶意代码检测系统,采用二进制代码的N-gram和变长N-gram作为特征提取方法,加权信息增益作为特征选择方法,使用多种分类器进行恶意代码检测。实验结果证明,该方法能有效提高恶意代码的检测率和准确率。
Using data mining technology to detect malicious code, this paper proposes a feature selection method based on weighted intormation gain. This method can select effective features more correctly by combining the advantage of informatiou gain with classwise frequency. A malicious code detection system is implemented which adopts binary N-gram and variable-length N-gram as the feature extraction method, weighted informatinn gain as the feature selection method. Several classifiers are used to detect malicious code in the system. Experimental results prove that this method can effectively improve the detection and accuracy rate.
出处
《计算机工程》
CAS
CSCD
北大核心
2010年第6期149-151,共3页
Computer Engineering
基金
国家"863"计划基金资助项目(2006AA01Z449)