Absent extreme learning machine algorithm with application to packed executable identification

作者：Xie, Peidai^*; Liu, Xinwang; Yin, Jianping; Wang, Yongjun

来源：Neural Computing & Applications, 2016, 27(1): 93-100.

DOI：10.1007/s00521-014-1558-4

• Extreme learning machine
• Packed executable identification
• Absent learning
• Malware

Extreme learning machine (ELM) has been an important research topic over the last decade due to its high efficiency, easy-implementation, unification of classification and regression, and unification of binary and multi-class learning tasks. Though integrating these advantages, existing ELM algorithms cannot directly handle the case where some features of the samples are missing or unobserved, which is usually very common in practical applications. The work in this paper fills this gap by proposing an absent ELM (A-ELM) algorithm to address the above issue. By observing the fact that some structural characteristics of a part of packed malware instances hold unreasonable values, we cast the packed executable identification tasks into an absence learning problem, which can be efficiently addressed via the proposed A-ELM algorithm. Extensive experiments have been conducted on six UCI data sets and a packed data set to evaluate the performance of the proposed algorithm. As indicated, the proposed A-ELM algorithm is superior to other imputation algorithms and existing state-of-the-art ones.

• 出版日期2016-1
• 单位中国人民解放军国防科学技术大学