VILO: a rapid learning nearest-neighbor classifier for malware triage

TY - JOUR

T1 - VILO: a rapid learning nearest-neighbor classifier for malware triage

AU - Lakhotia, Arun

AU - Walenstein, Andrew

AU - Miles, Craig

AU - Singh, Anshuman

N1 - VILO is a lazy learner system designed for malware classification and triage. It implements a nearest neighbor (NN) algorithm with similarities computed over Term Frequency $$\times $$ Inverse Document Frequency (TFIDF) weighted opcode mnemonic permutation features (N-perms). Being an NN-classifier, VILO makes minimal structural assumptions about class boundaries, and thus is well suited for the constantly changing malware population.

PY - 2013/8/1

Y1 - 2013/8/1

UR - https://link.springer.com/article/10.1007%2Fs11416-013-0178-3

U2 - 10.1007/s11416-013-0178-3

DO - 10.1007/s11416-013-0178-3

M3 - Article

VL - 9

JO - Journal of Computer Virology and Hacking Techniques

JF - Journal of Computer Virology and Hacking Techniques

ER -