An Efficient Approach For Malware Detection Using PE Header Specification
Following the dramatic growth of malware and the essential role of computer systems in our daily lives, the security of computer systems and the existence of malware detection systems become critical. In recent years, many machine learning methods have been used to learn the behavioral or structural patterns of malware. Because of their high generalization capability, they have achieved great success in detecting malware. In this paper, to identify malware programs, features extracted based on the header and PE file structure are used to train several machine learning models. The proposed method identifies malware programs with 95.59% accuracy using only nine features, the values of which have a significant difference between malware and benign files. Due to the high speed of the proposed model in feature extraction and the low number of extracted features, which lead to faster model training, the proposed method can be used in real-time malware detection systems
Code (1)
Tasks
BIG-bench Machine LearningMalware DetectionSimilar Papers 제목 키워드 기반
Learning the PE Header, Malware Detection with Minimal Domain Knowledge
Many efforts have been made to use various forms of domain knowledge in malware detection. Currently there exist two common approaches to malware detection without domain knowledge, namely byte n-grams and strings. In th…
Malware DetectionTrident: Improving Malware Detection with LLMs and Behavioral Features
Traditionally, machine learning methods for PE malware detection have relied on static features like byte histograms, string information, and PE header contents. One barrier to incorporating dynamic analysis features has…
Malware DetectionActive LearningA Comparison of State-of-the-Art Techniques for Generating Adversarial Malware Binaries
We consider the problem of generating adversarial malware by a cyber-attacker where the attacker's task is to strategically modify certain bytes within existing binary malware files, so that the modified files are able t…
BIG-bench Machine LearningMultimodal Techniques for Malware Classification
The threat of malware is a serious concern for computer networks and systems, highlighting the need for accurate classification techniques. In this research, we experiment with multimodal machine learning approaches for …
ClassificationMalware ClassificationTowards Novel Malicious Packet Recognition: A Few-Shot Learning Approach
As the complexity and connectivity of networks increase, the need for novel malware detection approaches becomes imperative. Traditional security defenses are becoming less effective against the advanced tactics of today…
Few-Shot LearningLanguage ModellingLarge Language ModelMalware Detection