<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">3</article-id>
      <title-group>
        <article-title>Malware detection approach based on the detection of abnormal network traffic using machine learning algorithms</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Подход к обнаружению вредоносных программ на основе выявления аномального сетевого трафика с использованием алгоритмов машинного обучения</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Kriulin</surname>
            <given-names>Artur</given-names>
          </name>
          <email>kriulin@mirea.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-5511-4000</contrib-id>
          <name>
            <surname>Eremeev</surname>
            <given-names>Mihail</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Nefedov</surname>
            <given-names>V.</given-names>
          </name>
        </contrib>
      </contrib-group>
      <aff id="aff1">MIREA – Russian Technological University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2021-11-12">
        <day>12</day>
        <month>11</month>
        <year>2021</year>
      </pub-date>
      <issue>3</issue>
      <fpage>27</fpage>
      <lpage>33</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/2021_3_5-6.pdf"/>
      <abstract xml:lang="en">
        <p>The article considers a possibility of using machine learning technologies to detect network connections of malicious programs based on the detection of anomalies. The classification of network connections of malicious software is carried out based on statistical signs during data transmission that occur at the transport and network levels of the OSI model. It is proposed to use machine learning technologies to assess the probability of detecting malware based on their network activity</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Machine Learning Algorithms</kwd>
        <kwd>Malware</kwd>
        <kwd>Intrusion Detection Tools</kwd>
        <kwd>Network Activity</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
