Skaar Ulbrich Macari, P.A.
Malicious software recognition apparatus and method
A malicious software recognition apparatus and method are provided. The malicious software recognition apparatus stores a training dataset, which includes a plurality of network flow datasets. Each network flow dataset corresponds to one of a plurality of software categories, and the software categories include a plurality of malicious software categories. The malicious software recognition apparatus tests a malicious software recognition model and learns that a plurality of recognition accuracies of a subset of the malicious software categories are low, determines that an overlap degree of the network flow datasets corresponding to the subset is high, updates the software categories by combining the malicious software categories corresponding to the subset, updates the training dataset by integrating the network flow datasets corresponding to the subset, trains the malicious software recognition model according to the updated training dataset. The trained malicious software recognition model is deployed to the real world.
Institute For Information Industry
G G G G G G H
G06F G06N G06F G06F G06K G06K H04L
inventional inventional inventional inventional inventional inventional inventional
Yan-Ju Jiann-Liang Ying-Tsun Yu-Hung Wei-Chao
Chen Chen Ke Chen Hsu