Publication: Complexity Reduction on API Call Sequence Alignment Using Unique API Word Sequence
1
Issued Date
2018-08-21
Resource Type
Other identifier(s)
2-s2.0-85053464205
Rights
Mahidol University
Rights Holder(s)
SCOPUS
Bibliographic Citation
ICSEC 2017 - 21st International Computer Science and Engineering Conference 2017, Proceeding. (2018), 15-18
Suggested Citation
Thotsaphon Tungjitviboonkun, Vasin Suttichaya Complexity Reduction on API Call Sequence Alignment Using Unique API Word Sequence. ICSEC 2017 - 21st International Computer Science and Engineering Conference 2017, Proceeding. (2018), 15-18. doi:10.1109/ICSEC.2017.8443930 Retrieved from: https://repository.li.mahidol.ac.th/handle/123456789/45593
Research Projects
Organizational Units
Authors
Journal Issue
Thesis
Title
Complexity Reduction on API Call Sequence Alignment Using Unique API Word Sequence
Author(s)
Other Contributor(s)
Abstract
© 2017 IEEE. API call analysis is well-known method for classifing malware based on their behaviors. An analysis based on sequence alignment of API call usually produces the high accuracy result. However, the method suffers from time consuming. Thus, researchers make trade-off between time and accuracy by neglecting API call arguments and/or grouping API calls into character categories. We suggest an approach to preserve API call arguments while reducing the alignment overhead by using longest common unique API word sequence as split points. The proposed method produces high matching sequences while API call arguments are preserved and time complexity is reduced. Moreover, we apply this approach to produce malware subfamily signature, the similar API calls that extracted from aligned sequences. Malware subfamily signatures can be used for detecting malware samples of their family with high accuracy.