The Performance of Machine and Deep Learning Classifiers in Detecting Zero-Day Vulnerabilities

Autor:	Abri, Faranak, Siami-Namini, Sima, Khanghah, Mahdi Adl, Soltani, Fahimeh Mirza, Namin, Akbar Siami
Rok vydání:	2019
Předmět:	Computer Science - Cryptography and Security Computer Science - Machine Learning
Druh dokumentu:	Working Paper
Popis:	The detection of zero-day attacks and vulnerabilities is a challenging problem. It is of utmost importance for network administrators to identify them with high accuracy. The higher the accuracy is, the more robust the defense mechanism will be. In an ideal scenario (i.e., 100% accuracy) the system can detect zero-day malware without being concerned about mistakenly tagging benign files as malware or enabling disruptive malicious code running as none-malicious ones. This paper investigates different machine learning algorithms to find out how well they can detect zero-day malware. Through the examination of 34 machine/deep learning classifiers, we found that the random forest classifier offered the best accuracy. The paper poses several research questions regarding the performance of machine and deep learning algorithms when detecting zero-day malware with zero rates for false positive and false negative. Comment: 8 pages, 2 figures, 3 tables, IEEE BigData 2019
Databáze:	arXiv
Externí odkaz:	http://arxiv.org/abs/1911.09586 Zobrazit plný text záznamu View this record from Arxiv