skip to main content
10.1145/3587135.3592820acmconferencesArticle/Chapter ViewAbstractPublication PagescfConference Proceedingsconference-collections
research-article

Work in Progress: New Seed Set Selection Method of the Scalable Method for Constructing Phylogenetic Trees

Published: 04 August 2023 Publication History

Abstract

This research aims at automatic clustering from a large-scale malware specimen set by constructing a phylogenetic tree. In our previous work, we proposed a scalable method for constructing a phylogenetic tree with a clustering algorithm. In this paper, we will introduce the current progress of our work. We are trying to improve our algorithm to achieve higher clustering accuracy and we are using a much larger IoT malware set containing 182,838 malware specimens to evaluate our method.

References

[1]
Bailey, M., Oberheide, J., Andersen, J., Mao, Z.M., Jahanian, F., and Nazario, J. Automated classification and analysis of internet malware. In Recent Advances in Intrusion Detection, 10th International Symposium, RAID 2007, Gold Goast, Australia, September 5-7, 2007, Proceedings (2007), pp. 178--197.
[2]
Cozzi, E., Vervier, P.-A., Dell'Amico, M., Shen, Y., Bilge, L., and Balzarotti, D. The tangled genealogy of iot malware. In Annual Computer Security Applications Conference (New York, NY, USA, 2020), ACSAC '20, Association for Computing Machinery, p. 1--16.
[3]
He, T., Han, C., Isawa, R., Takahashi, T., Kijima, S., and Takeuchi, J. Scalable and fast algorithm for constructing phylogenetic trees with application to iot malware clustering. IEEE Access 11 (2023), 8240--8253.
[4]
Hsiao, S.-W., Sun, Y. S., and Chen, M. C. Behavior grouping of android malware family. In 2016 IEEE International Conference on Communications (2016), pp. 1--6.
[5]
Karim, M. E., Walenstein, A., Lakhotia, A., and Parida, L. Malware phylogeny generation using permutations of code. Journal in Computer Virology 1, 1-2 (2005), 13--23.
[6]
Li, M., Chen, X., Li, X., Ma, B., and Vitányi, P. M. B. The similarity metric. IEEE Trans. Information Theory 50, 12 (2004), 3250--3264.
[7]
Pa, Y. M. P., Suzuki, S., Yoshioka, K., Matsumoto, T., Kasama, T., and Rossow, C. Iotpot: A novel honeypot for revealing current iot threats. Journal of Information Processing 24, 3 (2016), 522--533.
[8]
Saitou, N., and Nei, M. The neighbor-joining method: a new method for reconstructing phylogenetic trees. Molecular Biology and Evolution 4, 4 (1987), 406--425.
[9]
Vinod, P., Laxmi, V., Gaur, M. S., and Chauhan, G. Momentum: Metamorphic malware exploration techniques using msa signatures. In 2012 International Conference on Innovations in Information Technology (IIT) (2012), pp. 232--237.
[10]
Wehner, S. Analyzing worms and network traffic using compression. J. Comput. Secur. 15, 3 (2007), 303--320.

Index Terms

  1. Work in Progress: New Seed Set Selection Method of the Scalable Method for Constructing Phylogenetic Trees

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Conferences
    CF '23: Proceedings of the 20th ACM International Conference on Computing Frontiers
    May 2023
    419 pages
    ISBN:9798400701405
    DOI:10.1145/3587135
    Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

    Sponsors

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 04 August 2023

    Permissions

    Request permissions for this article.

    Check for updates

    Author Tags

    1. IoT malware
    2. Phylogenetic tree
    3. clustering

    Qualifiers

    • Research-article
    • Research
    • Refereed limited

    Funding Sources

    • the Ministry of Internal Affairs and Communications, Japan
    • JST SPRING

    Conference

    CF '23
    Sponsor:

    Acceptance Rates

    CF '23 Paper Acceptance Rate 24 of 66 submissions, 36%;
    Overall Acceptance Rate 273 of 785 submissions, 35%

    Upcoming Conference

    CF '25

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • 0
      Total Citations
    • 40
      Total Downloads
    • Downloads (Last 12 months)13
    • Downloads (Last 6 weeks)0
    Reflects downloads up to 17 Jan 2025

    Other Metrics

    Citations

    View Options

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    Media

    Figures

    Other

    Tables

    Share

    Share

    Share this Publication link

    Share on social media