论文标题
等级-1相似性矩阵分解，用于建模抗病毒的变化随时间的变化
Rank-1 Similarity Matrix Decomposition For Modeling Changes in Antivirus Consensus Through Time
论文作者
论文摘要
尽管已知存在密切相关的防病毒发动机组，但目前对这些相关性是如何或原因的理解有限。使用代表十年的防病毒扫描数据的2500万个病毒报告的语料库，我们挑战了这些相关性主要源于“一阶”相互作用（例如防病毒供应商）复制领先供应商标签的智慧。我们介绍了时间等级-1相似性矩阵分解（R1SM-T），以研究这些相关性的起源并建模防病毒引擎之间的共识如何随时间变化。我们揭示，一阶相互作用在防病毒相关性中的行为不如先前认为的那么多，并且防病毒发动机之间的关系高度挥发。我们根据我们的发现提出建议对未来研究和考虑的项目提出建议。
Although groups of strongly correlated antivirus engines are known to exist, at present there is limited understanding of how or why these correlations came to be. Using a corpus of 25 million VirusTotal reports representing over a decade of antivirus scan data, we challenge prevailing wisdom that these correlations primarily originate from "first-order" interactions such as antivirus vendors copying the labels of leading vendors. We introduce the Temporal Rank-1 Similarity Matrix decomposition (R1SM-T) in order to investigate the origins of these correlations and to model how consensus amongst antivirus engines changes over time. We reveal that first-order interactions do not explain as much behavior in antivirus correlation as previously thought, and that the relationships between antivirus engines are highly volatile. We make recommendations on items in need of future study and consideration based on our findings.
