[vc_empty_space][vc_empty_space]
The Use of Honeypot in Machine Learning Based on Malware Detection: A Review
Matin I.M.M.a, Rahardjo B.a
a School of Electrical Engineering and Informatics, Bandung Institute of Technology, Bandung, Indonesia
[vc_row][vc_column][vc_row_inner][vc_column_inner][vc_separator css=”.vc_custom_1624529070653{padding-top: 30px !important;padding-bottom: 30px !important;}”][/vc_column_inner][/vc_row_inner][vc_row_inner layout=”boxed”][vc_column_inner width=”3/4″ css=”.vc_custom_1624695412187{border-right-width: 1px !important;border-right-color: #dddddd !important;border-right-style: solid !important;border-radius: 1px !important;}”][vc_empty_space][megatron_heading title=”Abstract” size=”size-sm” text_align=”text-left”][vc_column_text]© 2020 IEEE.A very significant increase in the spread of malware has resulted in malware analysis using signature matching approaches and heuristic methods that are no longer suitable for malware analysis. Recently the approach to using machine learning has been proposed by many researchers. Machine learning is considered a more effective and efficient approach to detect malware compared to conventional approaches. At the same time, researchers proposed a honeypot as a device capable of gathering malware information. Honeypot is designed as a malware trap and is stored on the system provided. Then record events that detect and gather information about the attacker’s activities and identity. This paper aims to investigate the use of honeypot in machine learning to detect malware. The Systematic Literature Review (SLR) method was used to identify 684 papers in the IEEE Xplore database and ACM Digital Library based on automatic searches and predefined strings. Then 11 papers were selected to be investigated based on inclusion and exclusion criteria. From the results of the literature, it can be concluded that the trend of honeypot use in malware detection-based learning has increased from 2017 to 2019. The techniques used by most researchers are utilizing available honeypot datasets. Meanwhile, based on the type of malware analyzed, honeypot in machine learning is mostly used to collect IoT-based malware.[/vc_column_text][vc_empty_space][vc_separator css=”.vc_custom_1624528584150{padding-top: 25px !important;padding-bottom: 25px !important;}”][vc_empty_space][megatron_heading title=”Author keywords” size=”size-sm” text_align=”text-left”][vc_column_text]Automatic searches,Conventional approach,Honeypots,Inclusion and exclusions,Malware analysis,Malware detection,Signature-matching,Systematic literature review (SLR)[/vc_column_text][vc_empty_space][vc_separator css=”.vc_custom_1624528584150{padding-top: 25px !important;padding-bottom: 25px !important;}”][vc_empty_space][megatron_heading title=”Indexed keywords” size=”size-sm” text_align=”text-left”][vc_column_text]honeypot,machine learning,malware,SLR,survey[/vc_column_text][vc_empty_space][vc_separator css=”.vc_custom_1624528584150{padding-top: 25px !important;padding-bottom: 25px !important;}”][vc_empty_space][megatron_heading title=”Funding details” size=”size-sm” text_align=”text-left”][vc_column_text][/vc_column_text][vc_empty_space][vc_separator css=”.vc_custom_1624528584150{padding-top: 25px !important;padding-bottom: 25px !important;}”][vc_empty_space][megatron_heading title=”DOI” size=”size-sm” text_align=”text-left”][vc_column_text]https://doi.org/10.1109/CITSM50537.2020.9268794[/vc_column_text][/vc_column_inner][vc_column_inner width=”1/4″][vc_column_text]Widget Plumx[/vc_column_text][/vc_column_inner][/vc_row_inner][/vc_column][/vc_row][vc_row][vc_column][vc_separator css=”.vc_custom_1624528584150{padding-top: 25px !important;padding-bottom: 25px !important;}”][/vc_column][/vc_row]