Please use this identifier to cite or link to this item:
|Type:||Artigo de Periódico|
|Title:||An Ontology Of Suspicious Software Behavior|
R; de Marchi
OF; de Geus
|Abstract:||Malicious programs have been the main actors in complex, sophisticated attacks against nations, governments, diplomatic agencies, private institutions and people. Knowledge about malicious program behavior forms the basis for constructing more secure information systems. In this article, we introduce MBO, a Malicious Behavior Ontology that represents complex behaviors of suspicious executions, and through inference rules calculates their associated threat level for analytical proposals. We evaluate MBO using over two thousand unique known malware and 385 unique known benign software. Results highlight the representativeness of the MBO for expressing typical malicious activities.|
|Citation:||Applied Ontology. IOS PRESS, n. 11, n. 1, p. 29 - 49.|
|Appears in Collections:||Unicamp - Artigos e Outros Documentos|
Files in This Item:
There are no files associated with this item.
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.