| Presentation | 2015-03-04 The Geographical Origin Estimation of Malware Using Language Information Masaru KAWAKITA, Shigeyoshi SHIMA, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | Cyber attack using malware has become a social problem, it had an impact on the decision in the nation. In the conventional methods that evaluates for a file whether is malware or not, anyone did not know which nation or organization had attacked. Regardless of use or non-use of the network infrastructures and creation toolkits, the malwares often include some attacker's claims with geographical information. In this paper, for the purpose of estimating malware's geographical origin, I propose the estimation method of country of origin using Kernel-Based SVM of which the feature vectors are the locale ID of the resource, the Unicode Block in strings, the countries by the embedded IP address assignment, and the timestamp and time zone information that include in the malware. In the experiment of a classification problem, we show that our method has 95.8% of accuracy rate. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Cyber Security / Malware Analysis / Locale / SVM (Support Vector Machine) / Classification |
| Paper # | ICSS2014-88 |
| Date of Issue |
| Conference Information | |
| Committee | ICSS |
|---|---|
| Conference Date | 2015/2/24(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | |
| Chair | |
| Vice Chair | |
| Secretary | |
| Assistant | |
| Paper Information | |
| Registration To | Information and Communication System Security (ICSS) |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | The Geographical Origin Estimation of Malware Using Language Information |
| Sub Title (in English) | |
| Keyword(1) | Cyber Security |
| Keyword(2) | Malware Analysis |
| Keyword(3) | Locale |
| Keyword(4) | SVM (Support Vector Machine) |
| Keyword(5) | Classification |
| 1st Author's Name | Masaru KAWAKITA |
| 1st Author's Affiliation | Cloud System Research Laboratories, NEC Corporation() |
| 2nd Author's Name | Shigeyoshi SHIMA |
| 2nd Author's Affiliation | Cloud System Research Laboratories, NEC Corporation |
| Date | 2015-03-04 |
| Paper # | ICSS2014-88 |
| Volume (vol) | vol.114 |
| Number (no) | 489 |
| Page | pp.pp.- |
| #Pages | 6 |
| Date of Issue | |