Recovery of files after detection of APT malware using FRR algorithm
| Author(s) | : | Vidya Gholap, Kamini Borkar, Sonali Rajput, Pallavi Patil, Ms. Deepali Chaudhari |
| Institution | : | Department of Comp engineering, D. Y. Patil College of engineering |
| Published In | : | Vol. 4, Issue 3 — March 2017 |
| Page No. | : | 656-660 |
| Domain | : | Engineering |
| Type | : | Research Paper |
| ISSN (Online) | : | 2348-4470 |
| ISSN (Print) | : | 2348-6406 |
APT (Advanced Persistent Threat) is a genuine risk to the Internet. With the help of APT malware, attackerscan remotely control infected machine and steal the personal information. DNS is well known for malware to findcommand and control (C&C) servers. The proposed novel system placed at the network departure guide that pointstoward effectively and efficiently detect APT malware infections based on malicious DNS and traffic analysis. To detectsuspicious APT malware C&C domains the system utilizes malicious DNS analysis method, and afterward analyse thetraffic of the comparing suspicious IP utilizing anomaly-based and signature based detection innovation. There areseparated 14 features in view of big data to describe properties of malware-related DNS. This manufactured a reputationengine to compute a score for an IP address by utilizing these elements vector together
Vidya Gholap, Kamini Borkar, Sonali Rajput, Pallavi Patil, Ms. Deepali Chaudhari, “Recovery of files after detection of APT malware using FRR algorithm”, International Journal of Advance Engineering and Research Development (IJAERD), Vol. 4, Issue 3, pp. 656-660, March 2017.
