High-resolution Image-based Malware Classification using Multiple Instance Learning
This paper proposes a novel method of classifying malware into families using high-resolution greyscale images and multiple instance learning to overcome adversarial binary enlargement. Current methods of visualisation-based malware classification largely rely on lossy transformations of inputs such as resizing to handle the large, variable-sized images. Through empirical analysis and experimentation, it is shown that these approaches cause crucial information loss that can be exploited. The proposed solution divides the images into patches and uses embedding-based multiple instance learning with a convolutional neural network and an attention aggregation function for classification. The implementation is evaluated on the Microsoft Malware Classification dataset and achieves accuracies of up to $96.6\%$ on adversarially enlarged samples compared to the baseline of $22.8\%$. The Python code is available online at https://github.com/timppeters/MIL-Malware-Images .
Code (1)
Tasks
ClassificationMalware ClassificationMultiple Instance LearningSimilar Papers 제목 키워드 기반
Malware Classification Using Transfer Learning
With the rapid growth of the number of devices on the Internet, malware poses a threat not only to the affected devices but also their ability to use said devices to launch attacks on the Internet ecosystem. Rapid malwar…
ClassificationDeep LearningMalware ClassificationTransfer LearningBinImg2Vec: Augmenting Malware Binary Image Classification with Data2Vec
Rapid digitalisation spurred by the Covid-19 pandemic has resulted in more cyber crime. Malware-as-a-service is now a booming business for cyber criminals. With the surge in malware activities, it is vital for cyber defe…
Classificationimage-classificationImage ClassificationSelf-Supervised LearningOrthrus: A Bimodal Learning Architecture for Malware Classification
Malware detection and classification is a challenging problem and an active area of research. Traditional machine learning methods depend almost entirely on the ability to extract a set of discriminative features into wh…
ClassificationDeep LearningFeature EngineeringGeneral Classification+2Exploring Optimal Deep Learning Models for Image-based Malware Variant Classification
Analyzing a huge amount of malware is a major burden for security analysts. Since emerging malware is often a variant of existing malware, automatically classifying malware into known families greatly reduces a part of t…
ClassificationComputer SecurityDeep LearningGeneral Classification+3Malware Images:Visualization and Automatic Classification
We propose a simple yet effective method for visualizing and classifying malware using image processing techniques. Malware binaries are visualized as gray-scale images, with the observation that for many malware familie…
Classification