Talk · IEEE International Conference on Application of Information and Communication Technologies · September 1, 2017
A Frequency Approach to Creation of Executable File Signatures for their Identification
Kseniya Salakhutdinova, Ilya Lebedev, Irina Krivtsova, Nurzhan Bazhayev, Сухопаров Михаил Евгеньевич, Pavel Smimov
Abstract
The paper presents methods of executable file signature creation based on frequency distributions of their informative features to be applied for program identification. Identification here should be understood as a process of file recognition by establishing its coincidence with a particular program. A new approach to creation of the archive of program signatures, both in terms of byte-frequency distribution of a program's binary code, and in terms of frequency distribution of assembler commands in their disassembler codes, is presented. The new method of executable file identification is offered and the results of experiments on their identification using a statistical criterion of φ * -Fisher and analysis of the slope are provided. The proposed method can be used to audit data-storage medium.
More by Nurzhan Bazhayev
- Using Information on Influencing Factors to Partition Training Samples for Classification Under Changing Operating ConditionsAlgorithms · 2026
- Detection of network anomalies in the Internet of Things environment using modified statistical criteria and ensemble methodsScientific and technical journal of information technologies mechanics and optics · 2026
- Cybersecurity as a Business Process: Developing a Multi-Level Dashboard System for Information Security Risk ManagementInternational Symposium on Parallel Computing and Distributed Systems · 2025
- INTELLIGENT METHOD OF CONTINUOUS SECURITY MONITORING IN IEEE 802.15.4 NETWORKS BASED ON ADAPTIVE ANOMALY ANALYSISBulletin of Shakarim University Technical Sciences · 2025