Marnerides, A and Spachos, P and Chatzimisios, P and Mauthe, A (2015) Malware Detection in the Cloud under Ensemble Empirical Mode Decomposition. In: 2015 International Conference of Computing, Neworking and Communications . pp. 82-88. (IEEE International Conference on Computing, Networking and Communications, 16-19th February 2015, Anaheim, California, USA).
eemd_icnc_crc.pdf - Accepted Version
Cloud networks underpin most of todays’ socioeconomical
Information Communication Technology (ICT) environments
due to their intrinsic capabilities such as elasticity and
service transparency. Undoubtedly, this increased dependence of numerous always-on services with the cloud is also subject to a number of security threats. An emerging critical aspect is related with the adequate identification and detection of malware. In the majority of cases, malware is the first building block for larger security threats such as distributed denial of service attacks (e.g. DDoS); thus its immediate detection is of crucial importance. In this paper we introduce a malware detection technique based on Ensemble Empirical Mode Decomposition (E-EMD) which is performed on the hypervisor level and jointly considers system and network information from every Virtual Machine (VM). Under two pragmatic cloud-specific scenarios instrumented in our controlled experimental testbed we show that our proposed technique can reach detection accuracy rates over 90% for a range of malware samples. In parallel we demonstrate the superiority of the introduced approach after comparison with a covariance-based anomaly detection technique that has been broadly used in previous studies. Consequently, we argue that our presented scheme provides a promising foundation towards the efficient detection of malware in modern virtualized cloud environments.
Index Terms—Malware Detection, Empirical Mode Decomposition,
Cloud computing, Anomaly Detection
|Item Type:||Conference or Workshop Item (Paper)|
|Subjects:||Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Q Science > QA Mathematics > QA76 Computer software
|Date Deposited:||15 Jan 2015 15:52|
|Last Modified:||25 Jun 2015 15:03|
Actions (login required)