2010 Third International Conference on Knowledge Discovery and Data Mining RBACS: Rootkit Behavioral Analysis and Classification System Phuket, Thailand January 09-January 10 ISBN: 978-0-7695-3923-2
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/WKDD.2010.23
In this paper, we focus on rootkits, a special type of malicious software (malware) that operates in an obfuscated and stealthy mode to evade detection. Categorizing these rootkits will help in detecting future attacks against the business community. We first developed a theoretical framework for classifying rootkits. Based on our theoretical framework, we then proposed a new rootkit classification system and tested our system on a sample of rootkits that use inline function hooking. Our experimental results showed that our system could successfully categorize the sample using unsupervised clustering.
Index Terms:
rootkits, malware, behavioral analysis, classification, data mining
Citation:
Desmond Lobo, Paul Watters, Xinwen Wu, "RBACS: Rootkit Behavioral Analysis and Classification System," wkdd, pp.75-80, 2010 Third International Conference on Knowledge Discovery and Data Mining, 2010 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||