Support Vector Machine Based on Incremental Learning for Malware Detection

Abstract

The training of traditional SVM method requires the solution of quadratic programming, and consumes high memory and has low speed for large data training. Incremental learning is one of the meaningful methods to continuously update the data for learning, which keeps the previous learning results, re learning only for the additional data, so as to form a continuous learning process. This paper will study the support vector machine based on incremental learning method and its application in the malware detection. The experiments carried out in the Internet Security Laboratory at Kingsoft Corporation suggested that, for large number of virus samples, our method can rapidly and effectively update the sample features, which avoids duplication of learning history samples and ensures the malware prediction ability for the detection model.