Standard
An Approach to Selecting an Informative Feature in Software Identification. / Salakhutdinova, Kseniya; Krivtsova, Irina; Lebedev, Ilya; Sukhoparov, Mikhail.
Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings. ed. / Sergey Balandin; Olga Galinina; Sergey Andreev; Yevgeni Koucheryavy. Springer Nature, 2018. p. 318-327 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11118 LNCS).
Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Research › peer-review
Harvard
Salakhutdinova, K, Krivtsova, I
, Lebedev, I & Sukhoparov, M 2018,
An Approach to Selecting an Informative Feature in Software Identification. in S Balandin, O Galinina, S Andreev & Y Koucheryavy (eds),
Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11118 LNCS, Springer Nature, pp. 318-327, 18th International Conference on Next Generation Teletraffic and Wired/Wireless Advanced Networks and Systems, NEW2AN 2018 and 11th Conference on Internet of Things and Smart Spaces, ruSMART 2018, St. Petersburg, Russian Federation,
27/08/18.
https://doi.org/10.1007/978-3-030-01168-0_30
APA
Salakhutdinova, K., Krivtsova, I.
, Lebedev, I., & Sukhoparov, M. (2018).
An Approach to Selecting an Informative Feature in Software Identification. In S. Balandin, O. Galinina, S. Andreev, & Y. Koucheryavy (Eds.),
Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings (pp. 318-327). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11118 LNCS). Springer Nature.
https://doi.org/10.1007/978-3-030-01168-0_30
Vancouver
Salakhutdinova K, Krivtsova I
, Lebedev I, Sukhoparov M.
An Approach to Selecting an Informative Feature in Software Identification. In Balandin S, Galinina O, Andreev S, Koucheryavy Y, editors, Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings. Springer Nature. 2018. p. 318-327. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
https://doi.org/10.1007/978-3-030-01168-0_30
Author
Salakhutdinova, Kseniya ; Krivtsova, Irina
; Lebedev, Ilya ; Sukhoparov, Mikhail. /
An Approach to Selecting an Informative Feature in Software Identification. Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings. editor / Sergey Balandin ; Olga Galinina ; Sergey Andreev ; Yevgeni Koucheryavy. Springer Nature, 2018. pp. 318-327 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
BibTeX
@inproceedings{209caae91f804b0cbd2ec0acda5de216,
title = "An Approach to Selecting an Informative Feature in Software Identification",
abstract = "Statement of Research. A need to reduce the increasing number of system vulnerabilities caused by unauthorized software installed on computer aids necessitates development of an approach to automate the data-storage media audit. The article describes an approach to identification of informative assembly instructions. Also, the influence of a chosen feature that is used to create a unified program signature on identification result is shown. Methods. Shannon method allowing a determination of feature informativeness for a random number of object classes and not depending on the sample volume of observed features is used to calculate informativeness. Identification of elf-files was based on applying statistical chi-squared test of homogeneity. Main Findings. Quantitative characteristics of informativeness for 118 assembly instructions have been obtained. The analysis of experimental results for executable files identification with 10 different features used to create program signatures compared by means of the chi-squared test of homogeneity at significance levels p = 0.05 and p = 0.01 has been carried out. Practical Relevance. The importance of using a particular feature in program signature creation has been discovered, as well as the capability of considering several executable file signatures together to provide a summative assessment on their belonging to a certain program.",
keywords = "Chi-square test, Elf-files, Identification of executable files, Information security, Informativeness of a feature",
author = "Kseniya Salakhutdinova and Irina Krivtsova and Ilya Lebedev and Mikhail Sukhoparov",
year = "2018",
month = jan,
day = "1",
doi = "10.1007/978-3-030-01168-0_30",
language = "English",
isbn = "9783030011673",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Nature",
pages = "318--327",
editor = "Sergey Balandin and Olga Galinina and Sergey Andreev and Yevgeni Koucheryavy",
booktitle = "Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings",
address = "Germany",
note = "18th International Conference on Next Generation Teletraffic and Wired/Wireless Advanced Networks and Systems, NEW2AN 2018 and 11th Conference on Internet of Things and Smart Spaces, ruSMART 2018 ; Conference date: 27-08-2018 Through 29-08-2018",
}
RIS
TY - GEN
T1 - An Approach to Selecting an Informative Feature in Software Identification
AU - Salakhutdinova, Kseniya
AU - Krivtsova, Irina
AU - Lebedev, Ilya
AU - Sukhoparov, Mikhail
PY - 2018/1/1
Y1 - 2018/1/1
N2 - Statement of Research. A need to reduce the increasing number of system vulnerabilities caused by unauthorized software installed on computer aids necessitates development of an approach to automate the data-storage media audit. The article describes an approach to identification of informative assembly instructions. Also, the influence of a chosen feature that is used to create a unified program signature on identification result is shown. Methods. Shannon method allowing a determination of feature informativeness for a random number of object classes and not depending on the sample volume of observed features is used to calculate informativeness. Identification of elf-files was based on applying statistical chi-squared test of homogeneity. Main Findings. Quantitative characteristics of informativeness for 118 assembly instructions have been obtained. The analysis of experimental results for executable files identification with 10 different features used to create program signatures compared by means of the chi-squared test of homogeneity at significance levels p = 0.05 and p = 0.01 has been carried out. Practical Relevance. The importance of using a particular feature in program signature creation has been discovered, as well as the capability of considering several executable file signatures together to provide a summative assessment on their belonging to a certain program.
AB - Statement of Research. A need to reduce the increasing number of system vulnerabilities caused by unauthorized software installed on computer aids necessitates development of an approach to automate the data-storage media audit. The article describes an approach to identification of informative assembly instructions. Also, the influence of a chosen feature that is used to create a unified program signature on identification result is shown. Methods. Shannon method allowing a determination of feature informativeness for a random number of object classes and not depending on the sample volume of observed features is used to calculate informativeness. Identification of elf-files was based on applying statistical chi-squared test of homogeneity. Main Findings. Quantitative characteristics of informativeness for 118 assembly instructions have been obtained. The analysis of experimental results for executable files identification with 10 different features used to create program signatures compared by means of the chi-squared test of homogeneity at significance levels p = 0.05 and p = 0.01 has been carried out. Practical Relevance. The importance of using a particular feature in program signature creation has been discovered, as well as the capability of considering several executable file signatures together to provide a summative assessment on their belonging to a certain program.
KW - Chi-square test
KW - Elf-files
KW - Identification of executable files
KW - Information security
KW - Informativeness of a feature
UR - http://www.scopus.com/inward/record.url?scp=85054850048&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-01168-0_30
DO - 10.1007/978-3-030-01168-0_30
M3 - Conference contribution
AN - SCOPUS:85054850048
SN - 9783030011673
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 318
EP - 327
BT - Internet of Things, Smart Spaces, and Next Generation Networks and Systems - 18th International Conference, NEW2AN 2018, and 11th Conference, ruSMART 2018, Proceedings
A2 - Balandin, Sergey
A2 - Galinina, Olga
A2 - Andreev, Sergey
A2 - Koucheryavy, Yevgeni
PB - Springer Nature
T2 - 18th International Conference on Next Generation Teletraffic and Wired/Wireless Advanced Networks and Systems, NEW2AN 2018 and 11th Conference on Internet of Things and Smart Spaces, ruSMART 2018
Y2 - 27 August 2018 through 29 August 2018
ER -