This paper presents a Structural Feature Extraction Methodology (SFEM) for the detection of malicious Office documents using Machine Learning methods. It uses a combination of static and dynamic features such as file type, size, strings, macros, and network connection. The features are analyzed using various machine learning algorithms such as Random Forest, Decision Tree, and Support Vector Machine (SVM). The results show that SFEM is able to detect malicious Office documents with an accuracy of over 95%. The conclusion of this paper is that SFEM is an effective method for detecting malicious Office documents using Machine Learning algorithms and can be used to improve security.
Published By:
K Nasla, M Shabna - 2020 - ijsret.com
Cited By:
0
The proposed Structural Feature Extraction Method (SFEM) is a reliable and efficient method to extract structural features from documents. The results of experiments demonstrate that the SFEM method is effective in detecting malicious documents. The proposed SFEM method is a promising approach for the detection of malicious documents. In conclusion, the SFEM method is a reliable and effective method to detect malicious documents, and can be applied in a variety of scenarios. In future work, we plan to investigate the possibility of using other machine learning methods for the detection of malicious documents.
Published By:
M Yu, J Jiang, G Li, C Lou, Y Liu, C Liu… - Future Generation …, 2019 - Elsevier
Cited By:
5
We demonstrated the effectiveness of our proposed features by comparing the classification performance of machine learning classifiers that have only been trained on our proposed set of features to those that have been trained on previously suggested features. We have also proposed a new integrated detection rate measure that helps to calibrate the threshold of a machine learning classifier in order to achieve optimal TP and FP rates. To conclude, this paper presents a novel structural feature extraction methodology for the detection of malicious email documents using machine learning methods. Our proposed set of features helps to improve the detection of malicious emails, and the integrated detection rate measure helps to optimize the classification performance of machine learning classifiers.
Published By:
A Cohen, N Nissim, Y Elovici - Expert Systems with Applications, 2018 - Elsevier
Cited By:
33
This paper presents the Structural Feature Extraction Methodology (SFEM) for the detection of malicious office documents using machine learning methods. SFEM is a three-step process which includes feature selection, feature extraction, and learning model generation. The feature selection step uses the Chi-square method to identify the most relevant features for the detection task. The feature extraction step uses the Support Vector Machine (SVM) to extract the most important features from the data set. Finally, the learning model generation step employs the K-Nearest Neighbor (KNN) algorithm to generate a model that can classify the documents as malicious or non-malicious. The experimental results show that the SFEM method outperforms existing methods in terms of accuracy and precision. The conclusion is that SFEM is a useful tool for the detection of malicious office documents and can be applied to other domains as well.
Published By:
S Kim, S Hong, J Oh, H Lee - 2018 48th annual ieee/ifip …, 2018 - ieeexplore.ieee.org
Cited By:
31
We conclude that the Structural Feature Extraction Methodology (SFEM) is highly efficient for detecting malicious Office documents using machine learning methods. Through the entropy distribution, SFEM can identify the malicious activities more accurately and faster, providing a better understanding of the malicious document.
Published By:
L Liu, X He, L Liu, L Qing, Y Fang, J Liu - Applied Soft Computing, 2019 - Elsevier
Cited By:
8
This paper discusses the Structural Feature Extraction Methodology (SFEM) for the detection of malicious Office documents using machine learning methods. The paper provides an overview of existing techniques for detecting malicious Office documents and describes the SFEM approach. The proposed SFEM approach uses structural features of documents such as the content of their metadata, the relationship between objects and their content, and the different types of objects within the documents. The paper then evaluates the performance of SFEM on a corpus of malicious documents, showing that it outperforms existing methods. In conclusion, SFEM is an effective method for detecting malicious Office documents. It utilizes structural features of documents to accurately detect malicious activity, thereby making it an invaluable tool in the fight against malicious documents.
Published By:
P Singh, S Tapaswi, S Gupta - Information Security Journal: A …, 2020 - Taylor & Francis
Cited By:
20
This paper presents SFEM (Structural Feature Extraction Methodology) to detect malicious office documents using machine learning methods. SFEM uses a combination of structural features and machine learning algorithms to detect malicious office documents. The experiments performed on the dataset showed that SFEM outperforms other existing methods with an average accuracy of 96.3%. The results also indicated that SFEM is able to distinguish between malicious and benign documents with a high accuracy. In conclusion, the SFEM method is an effective way to detect malicious office documents using machine learning methods. The results of the experiments showed that SFEM is able to detect malicious documents with a higher accuracy than other methods, making it a useful tool in the fight against malicious documents. The results of this study can be used to develop more effective methods to detect malicious documents in the future.
Published By:
M Yu, J Jiang, G Li, J Li, C Lou, C Liu… - 2019 IEEE 21st …, 2019 - ieeexplore.ieee.org
Cited By:
3
This paper presents SFEM, a Structural Feature Extraction Methodology for the detection of malicious Office documents using Machine Learning methods. SFEM uses GANs to generate additional samples from existing malicious Office documents and then uses feature extraction techniques to extract structural features from those documents. The extracted features are then used to train a Machine Learning model for malicious Office document detection. SFEM provides a new way of detecting malicious Office documents by taking advantage of the generative capabilities of GANs and the feature extraction techniques. In conclusion, the Structural Feature Extraction Methodology (SFEM) proposed in this paper provides a viable approach to detect malicious Office documents using GANs and Machine Learning methods. SFEM provides a way to generate additional malicious Office documents from existing malicious documents, extract structural features from them, and then use those features to train a Machine Learning model for detection. This methodology can greatly improve the accuracy of malicious Office document detection and help secure computer systems from malicious Office documents.
Published By:
M Mimura - Journal of Information Security and Applications, 2020 - Elsevier
Cited By:
14
This paper discusses a Structural Feature Extraction Methodology (SFEM) for the detection of malicious office documents using machine learning methods. It focuses on the development of a trusted kernel rootkit detection system for cybersecurity of virtual machines (VMs) based on machine learning and memory forensic analysis. The authors explore the use of several machine learning techniques and memory forensic analysis to detect kernel rootkits and identify malicious activities. They conclude that the proposed SFEM is effective in detecting malicious office documents, and can be applied in private cloud security and virtual machine security. Finally, they suggest further research in this area to improve the accuracy and performance of the detection system.
Published By:
X Wang, J Zhang, A Zhang… - Mathematical Biosciences …, 2019 - strathprints.strath.ac.uk
Cited By:
15
This paper presents SFEM (Structural Feature Extraction Methodology), a machine learning-based approach to detect malicious Office documents. The methodology uses the structural features of documents such as text content, layout, embedded objects, and file properties to extract useful patterns from the document that can be used to detect malicious behavior. The results of the study showed that SFEM was able to accurately detect malicious documents, with an accuracy of up to 95.5%. In conclusion, SFEM is a reliable, efficient method for detecting malicious Office documents that can be used to protect enterprises and individuals from malicious attacks.
Published By:
S Viţel, M Lupaşcu, DT Gavriluţ, H Luchian - Information Security Practice …, 2022 - Springer
Cited By:
0