IEWS: a Free Open Source Intelligent Early Warning
System Based on Machine Learning
With the introduction of new technologies and numerous services pro vided in the framework of computer networks, as well as the growth in
Malware that is abusing the Internet on a regular basis, the Internet
has become a severe threat.
In particular, malicious softwares called Malware, such as viruses,
ransomware and spyware, become a worldwide epidemic, and studies
indicate that the effect is worsening, many approaches have been there
presented so far to cope with these many dangers. All of these tactics
have the same purpose in mind: to prevent attackers from achieving
their non-innocent goals.
Without a doubt, manual heuristic Malware analysis is no longer
deemed useful and efficient in light of the rapid pace of Malware
dissemination. Therefore, automated behaviour-based Malware de tection using advanced machine learning techniques is considered a
profound solution.
In this study, we propose an intelligent early warning system (IEWS)
for the autonomous analysis of Malware behaviour using a machine
learning algorithm. The proposed system enables the automated iden tification of new classes of Malware with similar behaviour (cluster ing) and the assignment of unknown Malware to these newly found
classes (classification). For this purpose, we present an incremental
technique for behaviour-based analysis based on both clustering and
classification, capable of analysing the behaviour of Malware binaries
on a daily basis.
The incremental analysis technique considerably decreases the run time overhead of current analysis methods while still delivering reli able detection and differentiation of emerging Malware variants.