loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2010 Third International Conference on Knowledge Discovery and Data Mining
RBACS: Rootkit Behavioral Analysis and Classification System
Phuket, Thailand
January 09-January 10
ISBN: 978-0-7695-3923-2
In this paper, we focus on rootkits, a special type of malicious software (malware) that operates in an obfuscated and stealthy mode to evade detection. Categorizing these rootkits will help in detecting future attacks against the business community. We first developed a theoretical framework for classifying rootkits. Based on our theoretical framework, we then proposed a new rootkit classification system and tested our system on a sample of rootkits that use inline function hooking. Our experimental results showed that our system could successfully categorize the sample using unsupervised clustering.
Index Terms:
rootkits, malware, behavioral analysis, classification, data mining
Citation:
Desmond Lobo, Paul Watters, Xinwen Wu, "RBACS: Rootkit Behavioral Analysis and Classification System," wkdd, pp.75-80, 2010 Third International Conference on Knowledge Discovery and Data Mining, 2010
Usage of this product signifies your acceptance of the Terms of Use.