Malware and Anomaly Detection Using Machine Learning and Deep Learning Methods

Malware and Anomaly Detection Using Machine Learning and Deep Learning Methods

Valliammal Narayan, Barani Shaju
Copyright: © 2020 |Pages: 28
DOI: 10.4018/978-1-5225-9611-0.ch006
OnDemand:
(Individual Chapters)
Available
$37.50
Current Special Offers
No Current Special Offers
TOTAL SAVINGS: $37.50

Abstract

This chapter aims to discuss applications of machine learning in cyber security and explore how machine learning algorithms help to fight cyber-attacks. Cyber-attacks are wide and varied in multiple forms. The key benefit of machine learning algorithms is that it can deep dive and analyze system behavior and identify anomalies which do not correlate with expected behavior. Algorithms can be trained to observe multiple data sets and strategize payload beforehand in detection of malware analysis.
Chapter Preview
Top

Introduction

Today, technology has become most essential part of our life. Internet usage has grown rapidly for the past years. Internet has brought about a new revolution in the fields of computing and communicating technology as it connects billions of infinitesimal devices. Potential intelligent support is provided by internet and the limitations of workplace is exempted using the wireless network providing excess mobility and flexibility over the conventional networks (Altaher. A, 2016). The sensitive information can be exposed by the transactions which were performed using the internet. Apart from the benefits of internet there are some drawbacks too like all our records, personal as well as professional, banking, medical, passwords, communication etc. can be made easily available to the antagonists using various illegal techniques and can finally receive our complete information, misuse our records imprecating the transactions which are online.

Figure 1.

Tabulation and graph on malware statistics

978-1-5225-9611-0.ch006.f01

In the year 2018, the number of internet users has significantly increased. There are about 55.1% internet users as compared to the world population in table as Figure 1.

Definition

Malware: It is a term used to describe malicious software, including spyware, ransomware, viruses, and worms. Malware breaches a network through vulnerability, typically when a user clicks a dangerous link or email attachment that then installs risky software (Bhattacharya A, 2017). Inside the system, malware can do the following access:

Box 1.
978-1-5225-9611-0.ch006.g01

Malvertising: This is the usage of web-based exposing to stretch malware. It ordinarily includes infusing malware-loaded commercials into genuine web-based publicizing systems and website links.

Figure 2.

Distribution of attacks in cyber security

978-1-5225-9611-0.ch006.f02

The number of cyber attacks has grown gradually during the last few years. In Figure 2, upshots shown that the malware attack have the highest percentage rate compared to other attacks. The increase of malware has presented a long-lasting and serious threat to the security of computer systems and internet. For example, the well-known WannaCry ransomware attack has affected millions of devices and caused billions of dollars damage. The number of malware has increased greatly every year, and it is reported that every 4.6 seconds a new malware specimen emerged in 2018.

Major Consequence

  • •

    More attacks are launched from the web - and not from executable files (PE-files)

  • •

    Overall numbers are decreasing, as attacks are more targeted

  • •

    Illegal hidden crypto mining (Crypto jacking) is on the rise

  • •

    Attackers make use of novel standards such as Web assembly for better efficiency

Complete Chapter List

Search this Book:
Reset