dc.contributor.author | Khodaei, Elaheh | |
dc.date.accessioned | 2024-04-24 20:15:13 (GMT) | |
dc.date.available | 2024-04-24 20:15:13 (GMT) | |
dc.date.issued | 2024-04-24 | |
dc.date.submitted | 2024-04-23 | |
dc.identifier.uri | http://hdl.handle.net/10012/20491 | |
dc.description.abstract | Microarchitectural events have been the subject of previous investigations for malware
detection. While some studies assert the effectiveness of utilizing hardware events in detecting
malware, others contend that they may not be beneficial for this purpose. We argue
and empirically show that the efficacy of using hardware events for malware detection relies
on accurately selecting hardware events during detector training. Through rigorous
analysis, we demonstrate that the conventional approach of selecting a single subset of
hardware events for training a malware detection model is insufficient for creating a robust
system capable of effectively handling all types of malware, even when using a ensemble
of powerful classifiers. Accordingly, we propose the use of multiple subsets of hardware
events, each dedicated to training a distinct malware detection model. Since only a single
subset of events can be monitored at any given time, we adopt a game-theoretic approach
to determine the optimal strategy for selecting the subset of hardware events to be monitored.
In addition to the theoretical analysis of our approach, we empirically demonstrate
its effectiveness by comparing it to other baselines. | en |
dc.language.iso | en | en |
dc.publisher | University of Waterloo | en |
dc.subject | Malware Detection | en |
dc.subject | Game Theory | en |
dc.subject | Microarchitectural Events | en |
dc.subject | Hardware Performance Counters | en |
dc.title | Salus: Stackelberg Games for Malware Detection with Microarchitectural Events | en |
dc.type | Master Thesis | en |
dc.pending | false | |
uws-etd.degree.department | Electrical and Computer Engineering | en |
uws-etd.degree.discipline | Electrical and Computer Engineering | en |
uws-etd.degree.grantor | University of Waterloo | en |
uws-etd.degree | Master of Applied Science | en |
uws-etd.embargo.terms | 0 | en |
uws.contributor.advisor | Zahedi, Majid | |
uws.contributor.affiliation1 | Faculty of Engineering | en |
uws.published.city | Waterloo | en |
uws.published.country | Canada | en |
uws.published.province | Ontario | en |
uws.typeOfResource | Text | en |
uws.peerReviewStatus | Unreviewed | en |
uws.scholarLevel | Graduate | en |