Automated Classification and Analysis of Internet Malware¶
Bailey, M., Oberheide, J., Andersen, J., Mao, Z. M., Jahanian, F., & Nazario, J. (2007). Automated Classification and Analysis of Internet Malware. Recent Advances in Intrusion Detection (RAID 2007).
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Clustering
- Cybersecurity and anthropology: clustering attack signatures and malware families to surface unknown campaigns from telemetry; clustering artefact assemblages and burial styles to identify cultural groupings before imposing historical labels.
This sourceClusters malware by behavioral signatures into families to surface campaigns — clustering attack/malware telemetry without predefined labels.
Supported in partVerified against the publisher's abstract
The abstract supports behavior-based clustering of malware into behavioral groups, but not attack signatures, telemetry, campaigns, or the anthropology example.
“we provide a method for automatically categorizing these profiles of malware into groups that reflect similar classes of behaviors and demonstrate how behavior-based clustering provides a more direct and effective way of classifying and analyzing Internet malware”
- Cybersecurity and anthropology: clustering attack signatures and malware families to surface unknown campaigns from telemetry; clustering artefact assemblages and burial styles to identify cultural groupings before imposing historical labels.
Verification¶
Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.
Does it back the claim? Read against the text for 1 of 1 citation: 1 supported in part. Each verdict is shown under its citation below, with what in the work backs the sentence.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:fc9a40e913ab · see in the full table