Exploring Optimal Deep Learning Models for Image-based Malware Variant Classification
Analyzing a huge amount of malware is a major burden for security analysts. Since emerging malware is often a variant of existing malware, automatically classifying malware into known families greatly reduces a part of their burden. Image-based malware classification with deep learning is an attractive approach for its simplicity, versatility, and affinity with the latest technologies. However, the impact of differences in deep learning models and the degree of transfer learning on the classification accuracy of malware variants has not been fully studied. In this paper, we conducted an exhaustive survey of deep learning models using 24 ImageNet pre-trained models and five fine-tuning parameters, totaling 120 combinations, on two platforms. As a result, we found that the highest classification accuracy was obtained by fine-tuning one of the latest deep learning models with a relatively low degree of transfer learning, and we achieved the highest classification accuracy ever in cross-validation on the Malimg and Drebin datasets. We also confirmed that this trend holds true for the recent malware variants using the VirusTotal 2020 Windows and Android datasets. The experimental results suggest that it is effective to periodically explore optimal deep learning models with the latest models and malware datasets by gradually reducing the degree of transfer learning from half.
Code (0)
등록된 구현이 없습니다.
Tasks
ClassificationComputer SecurityDeep LearningGeneral ClassificationImage ClassificationMalware ClassificationTransfer LearningSimilar Papers 제목 키워드 기반
A novel DL approach to PE malware detection: exploring Glove vectorization, MCC_RCNN and feature fusion
In recent years, malware becomes more threatening. Concerning the increasing malware variants, there comes Machine Learning (ML)-based and Deep Learning (DL)-based approaches for heuristic detection. Nevertheless, the pr…
Malware DetectionRandom Forest for Malware Classification
The challenge in engaging malware activities involves the correct identification and classification of different malware variants. Various malwares incorporate code obfuscation methods that alters their code signatures e…
ClassificationGeneral ClassificationMalware ClassificationDeepSign: Deep Learning for Automatic Malware Signature Generation and Classification
This paper presents a novel deep learning based method for automatic malware signature generation and classification. The method uses a deep belief network (DBN), implemented with a deep stack of denoising autoencoders, …
ClassificationDeep LearningDenoisingGeneral Classification+1Grouping the executables to detect malware with high accuracy
The metamorphic malware variants with the same malicious behavior (family), can obfuscate themselves to look different from each other. This variation in structure leads to a huge signature database for traditional signa…
ClusteringVocal Bursts Intensity PredictionTask-Aware Meta Learning-based Siamese Neural Network for Classifying Obfuscated Malware
Malware authors apply different techniques of control flow obfuscation, in order to create new malware variants to avoid detection. Existing Siamese neural network (SNN)-based malware detection methods fail to correctly …
Few-Shot LearningMalware DetectionMeta-Learning