关键词: 病毒家族, 可伸缩性聚类, 局部敏感哈希, 扩展K均值

Abstract: Anti-malware companies receive thousands of malware samples every day, so it becomes more and more pressing to handle these samples timely and effectively. A scalable clustering approach is proposed to group these massive malware samples. LSH algorithm is used to cluster samples rapidly. Extended K-means algorithm is employed to perform accurately clustering. Experimental results show that this approach can improve malware clustering efficiency observably at the cost of little accuracy.

Key words: malware family, scalable clustering, Locality Sensitive Hash（LSH） algorithm, extended K-means