Online Clustering of Known and Emerging Malware Families

arXiv:2405.03298v1 Announce Type: cross
Abstract: Malware attacks have become significantly more frequent and sophisticated in recent years. Therefore, malware detection and classification are critical components of information security. Due to the large amount of malware samples available, it is essential to categorize malware samples according to their malicious characteristics. Clustering algorithms are thus becoming more widely used in computer security to analyze the behavior of malware variants and discover new malware families. Online clustering algorithms help us to understand malware …

abstract algorithms arxiv attacks become classification clustering components cs.cr cs.lg detection families information information security malware malware detection samples security type