A Hybrid Learning System to Mitigate Botnet Concept Drift Attacks
- Authors
- Wang, Zhi; Tian, Meiqi; Zhang, Xiao; Wang, Junnan; Liu, Zheli; Jia, Chunfu; You, Ilsun
- Issue Date
- 2017
- Publisher
- National Dong Hwa University
- Keywords
- Malware detection; Machine learning; Concept drift; Vertical correlation; Horizontal correlation
- Citation
- Journal of Internet Technology, v.18, no.6, pp 1419 - 1428
- Pages
- 10
- Journal Title
- Journal of Internet Technology
- Volume
- 18
- Number
- 6
- Start Page
- 1419
- End Page
- 1428
- URI
- https://scholarworks.bwise.kr/sch/handle/2021.sw.sch/8385
- DOI
- 10.6138/JIT.2017.18.6.20171003
- ISSN
- 1607-9264
2079-4029
- Abstract
- Botnet is one of the most significant threats for Internet security. Machine learning has been widely deployed in botnet detection systems as a core component. The assumption of machine learning algorithm is that the underlying data distribution of botnet is stable for training and testing, however which is vulnerable to well-crafted concept drift attacks, such as mimicry attacks, gradient descent attacks, poisoning attacks and so on. So, machine learning itself could be the weakest link in a botnet detection system. This paper proposes a hybrid learning system that combines vertical and horizontal correlation models based on statistical p-values. The significant diversity between vertical and horizontal correlation models increases the difficulty of concept drift attacks. Moreover, average p-value assessment is applied to fortify the system to be more sensitive to hidden concept drift attacks. SIM and DIFF assessments are further introduced to locate the affected features when concept drift attacks are recognized, then active feature reweighting is used to mitigate model aging. The experiment results show that the hybrid system could recognize the concept drift among different Miuref variants, and reweight affected features to avoid model aging.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - College of Engineering > Department of Information Security Engineering > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/sch/handle/2021.sw.sch/8385)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.