In this proposed project, we will develop an automatic classifier that examines and mediates all outward-bound network packets to correctly identify the program that generates Internet-facing sessions. By categorically classifying all programs in the enterprise communicating to the Internet, we will be able to automatically identify, locate, and remediate malicious software that may be exfiltrating sensitive DoD information.
Keywords: Malicious Software, Intrusion Detection, Extrusion Detection, Exfiltration, Spyware, Classifier