Virus Detection System Based on Association Rule Mining
Dongyi Ye · Journal of Jimei University · 2006
Based on the analysis of Windows API calling sequences of PE files,a new approach for detecting polymorphic and unknown malware in the Windows platform is proposed by adopting data mining technique,i.e.,OOA mining algorithm.In addition,it is made contribution to optimize the signature creation by OOA rule generator,and the experimental results demonstrate the robustness and intelligence of the DMAV system.