Misuse Detection of Email Viruses base on SOM with k-medoids
Dong‐Her Shih, Sheng-Fei Hsu, Hsiu‐Sen Chiang, Chun-Pin Chang · Research in Computing Science · 2005
Email virus is an email that can infect other programs by modifying them to include a replication of it. When the infected emails are opened, the email virus spreads itself to others. We propose a novel approach to detect misuse emails by gathering and maintaining knowledge of the behavior of the malicious emails rather than anticipating attacks by unknown assailants. Any new activity of the email is compared to the malicious profile to detect a potential misuse. Comparison results show that our proposed methods outperformed than anti-virus software