Change search
ReferencesLink to record
Permanent link

Direct link
Accurate Adware Detection using Opcode Sequence Extraction
Responsible organisation
2011 (English)Conference paper (Refereed) Published
Abstract [en]

Adware represents a possible threat to the security and privacy of computer users. Traditional signature-based and heuristic-based methods have not been proven to be successful at detecting this type of software. This paper presents an adware detection approach based on the application of data mining on disassembled code. The main contributions of the paper is a large publicly available adware data set, an accurate adware detection algorithm, and an extensive empirical evaluation of several candidate machine learning techniques that can be used in conjunction with the algorithm. We have extracted sequences of opcodes from adware and benign software and we have then applied feature selection, using different configurations, to obtain 63 data sets. Six data mining algorithms have been evaluated on these data sets in order to find an efficient and accurate detector. Our experimental results show that the proposed approach can be used to accurately detect both novel and known adware instances even though the binary difference between adware and legitimate software is usually small.

Place, publisher, year, edition, pages
Vienna: IEEE Press , 2011.
Keyword [en]
Data Mining, Adware Detection, Binary Classification, Static Analysis, Disassembly, Instruction Sequences
National Category
Computer Science
URN: urn:nbn:se:bth-7462DOI: 10.1109/ARES.2011.35Local ID: 978-0-7695-4485-4/11OAI: diva2:835084
Sixth International Conference on Availability, Reliability and Security
Available from: 2012-09-18 Created: 2011-08-31 Last updated: 2015-06-30Bibliographically approved

Open Access in DiVA

fulltext(293 kB)92 downloads
File information
File name FULLTEXT01.pdfFile size 293 kBChecksum SHA-512
Type fulltextMimetype application/pdf

Other links

Publisher's full text

Search in DiVA

By author/editor
Lavesson, NiklasJohnson, Henric
Computer Science

Search outside of DiVA

GoogleGoogle Scholar
Total: 92 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Altmetric score

Total: 26 hits
ReferencesLink to record
Permanent link

Direct link