CASCADING CLASSIFIERS FOR COMPUTER SECURITY APPLICATIONS

The invention discloses cascading classifiers for computer security applications. Described systems and methods allow a computer security system to automatically classify target objects using a cascade of trained classifiers, for applications including malware, spam, and/or fraud detection. The cascade comprises several levels, each level including a set of classifiers. Classifiers are trained inthe predetermined order of their respective levels. Each classifier is trained to divide a corpus of records into a plurality of record groups so that a substantial proportion (e.g., at least 95%, orall) of the records in one such group are members of the same class. Between training classifiers of consecutive levels of the cascade, a set of training records of the respective group is discarded from the training corpus. When used to classify an unknown target object, some embodiments employ the classifiers in the order of their respective levels. 所描述的系统及方法允许计算机安全系统使用经训练分类器级联来对目标对象进行自动分类以用于包含恶意软件检测、垃圾邮件检测及/或欺诈检测在内的应用。所