| Paper Abstract and Keywords |
| Presentation |
2018-03-07 13:00
A Study on Malware Activity Detection Based on Real-time Analysis of Darknet Data Using Graphical Lasso Chansu Han (Kyushu Univ.), Jumpei Shimamura (Clwit Inc.), Takeshi Takahashi, Daisuke Inoue (NICT), Masanori Kawakita, Jun'ichi Takeuchi (Kyushu Univ.), Koji Nakao (NICT) ICSS2017-51 |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
In this study, we considered a method to detect malignant activity (especially botnet) in cyber space automatically and in real-time from darknet traffic data. A method to grasp the cooperative relationship between the source hosts from the traffic data based on the graph density obtained by the Graphical Lasso algorithm, and to detect abnormality was studied. We developed the method and proposed a method to detect malignant activities in real-time by using a new alert judgment method. In our research, we implemented a tool to carry out the analysis using the proposed method against actual darknet traffic and confirmed that it operates in real-time. At the same time, we shortened the program calculation time and evaluated parameter tuning. Finally, we introduced examples of malicious activities detected in continuous operation. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
Malware Activity Detection / Graphical Lasso / Graph Density / Online Processing / Real-time Analysis / / / |
| Reference Info. |
IEICE Tech. Rep., vol. 117, no. 481, ICSS2017-51, pp. 1-6, March 2018. |
| Paper # |
ICSS2017-51 |
| Date of Issue |
2018-02-28 (ICSS) |
| ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
| Download PDF |
ICSS2017-51 |
| Conference Information |
| Committee |
ICSS IPSJ-SPT |
| Conference Date |
2018-03-07 - 2018-03-08 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
Okinawa Hokubu Koyou Nouryoku Kaihatsu Sougou Center |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
Security, Trust, etc. |
| Paper Information |
| Registration To |
ICSS |
| Conference Code |
2018-03-ICSS-SPT |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
A Study on Malware Activity Detection Based on Real-time Analysis of Darknet Data Using Graphical Lasso |
| Sub Title (in English) |
|
| Keyword(1) |
Malware Activity Detection |
| Keyword(2) |
Graphical Lasso |
| Keyword(3) |
Graph Density |
| Keyword(4) |
Online Processing |
| Keyword(5) |
Real-time Analysis |
| Keyword(6) |
|
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Chansu Han |
| 1st Author's Affiliation |
Kyushu University (Kyushu Univ.) |
| 2nd Author's Name |
Jumpei Shimamura |
| 2nd Author's Affiliation |
Clwit Incorporated (Clwit Inc.) |
| 3rd Author's Name |
Takeshi Takahashi |
| 3rd Author's Affiliation |
National Institute of Information and Communications Technology (NICT) |
| 4th Author's Name |
Daisuke Inoue |
| 4th Author's Affiliation |
National Institute of Information and Communications Technology (NICT) |
| 5th Author's Name |
Masanori Kawakita |
| 5th Author's Affiliation |
Kyushu University (Kyushu Univ.) |
| 6th Author's Name |
Jun'ichi Takeuchi |
| 6th Author's Affiliation |
Kyushu University (Kyushu Univ.) |
| 7th Author's Name |
Koji Nakao |
| 7th Author's Affiliation |
National Institute of Information and Communications Technology (NICT) |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| 21st Author's Name |
|
| 21st Author's Affiliation |
() |
| 22nd Author's Name |
|
| 22nd Author's Affiliation |
() |
| 23rd Author's Name |
|
| 23rd Author's Affiliation |
() |
| 24th Author's Name |
|
| 24th Author's Affiliation |
() |
| 25th Author's Name |
|
| 25th Author's Affiliation |
() |
| 26th Author's Name |
/ / |
| 26th Author's Affiliation |
()
() |
| 27th Author's Name |
/ / |
| 27th Author's Affiliation |
()
() |
| 28th Author's Name |
/ / |
| 28th Author's Affiliation |
()
() |
| 29th Author's Name |
/ / |
| 29th Author's Affiliation |
()
() |
| 30th Author's Name |
/ / |
| 30th Author's Affiliation |
()
() |
| 31st Author's Name |
/ / |
| 31st Author's Affiliation |
()
() |
| 32nd Author's Name |
/ / |
| 32nd Author's Affiliation |
()
() |
| 33rd Author's Name |
/ / |
| 33rd Author's Affiliation |
()
() |
| 34th Author's Name |
/ / |
| 34th Author's Affiliation |
()
() |
| 35th Author's Name |
/ / |
| 35th Author's Affiliation |
()
() |
| 36th Author's Name |
/ / |
| 36th Author's Affiliation |
()
() |
| Speaker |
Author-1 |
| Date Time |
2018-03-07 13:00:00 |
| Presentation Time |
25 minutes |
| Registration for |
ICSS |
| Paper # |
ICSS2017-51 |
| Volume (vol) |
vol.117 |
| Number (no) |
no.481 |
| Page |
pp.1-6 |
| #Pages |
6 |
| Date of Issue |
2018-02-28 (ICSS) |