Design and Implementation of a Data Mining System for Malware Detection

Abstract

This paper describes the design and implementation of a data mining system called SNODMAL (Stream based novel class detection for malware) for malware detection. SNODMAL extends our data mining system called SNOD (Stream-based Novel Class Detection) for detecting malware. SNOD is a powerful system as it can detect novel classes. We also describe the design of SNODMAL++ which is an extended version of SNODMAL.