Title
On the appropriateness of evolutionary rule learning algorithms for malware detection
Abstract
In this paper, we evaluate the performance of ten well-known evolutionary and non-evolutionary rule learning algorithms. The comparative study is performed on a real-world classification problem of detecting malicious executables. The executable dataset, used in this study, consists of 189 attributes which are statically extracted from the executables of Microsoft Windows operating system. In our study, we compare the performance of rule learning algorithms with respect to four metrics: (1) classification accuracy, (2) the number of rules in the developed rule set, (3) the comprehensibility of the generated rules, and (4) the processing overhead of the rule learning process. The results of our comparative study suggest that evolutionary rule learning classifiers cannot be deployed in real-world malware detection systems.
Year
DOI
Venue
2009
10.1145/1570256.1570370
GECCO (Companion)
Keywords
Field
DocType
non-evolutionary rule,microsoft windows operating system,comparative study,classification accuracy,real-world classification problem,executable dataset,real-world malware detection system,evolutionary rule,developed rule set,malicious executables,operating system
Data mining,Microsoft Windows,Computer science,Algorithm,Artificial intelligence,Malware,Machine learning,Learning classifier system,Executable
Conference
Citations 
PageRank 
References 
4
0.58
24
Authors
3
Name
Order
Citations
PageRank
M. Zubair Shafiq154643.41
S. Momina Tabish21196.05
Muddassar Farooq3122183.47