Image-Based Malware Classification Using QR and Aztec Codes
In recent years, the use of image-based techniques for malware detection has gained prominence, with numerous studies demonstrating the efficacy of deep learning approaches such as Convolutional Neural Networks (CNN) in classifying images derived from executable files. In this paper, we consider an innovative method that relies on an image conversion process that consists of transforming features extracted from executable files into QR and Aztec codes. These codes capture structural patterns in a format that may enhance the learning capabilities of CNNs. We design and implement CNN architectures tailored to the unique properties of these codes and apply them to a comprehensive analysis involving two extensive malware datasets, both of which include a significant corpus of benign samples. Our results yield a split decision, with CNNs trained on QR and Aztec codes outperforming the state of the art on one of the datasets, but underperforming more typical techniques on the other dataset. These results indicate that the use of QR and Aztec codes as a form of feature engineering holds considerable promise in the malware domain, and that additional research is needed to better understand the relative strengths and weaknesses of such an approach.
Code (0)
등록된 구현이 없습니다.
Tasks
Feature EngineeringMalware ClassificationMalware DetectionSimilar Papers 제목 키워드 기반
CNN vs ELM for Image-Based Malware Classification
Research in the field of malware classification often relies on machine learning models that are trained on high-level features, such as opcodes, function calls, and control flow graphs. Extracting such features is costl…
BIG-bench Machine LearningClassificationGeneral ClassificationMalware ClassificationCNN-LSTM and Transfer Learning Models for Malware Classification based on Opcodes and API Calls
In this paper, we propose a novel model for a malware classification system based on Application Programming Interface (API) calls and opcodes, to improve classification accuracy. This system uses a novel design of combi…
ClassificationMalware ClassificationTransfer LearningAztec curve: proposal for a new space-filling curve
Different space-filling curves (SFCs) are briefly reviewed in this paper, and a new one is proposed. A century has passed between the inception of this kind of curves, since then they have been found useful in computer s…
compressed sensingMalware Classification Using Long Short-Term Memory Models
Signature and anomaly based techniques are the quintessential approaches to malware detection. However, these techniques have become increasingly ineffective as malware has become more sophisticated and complex. Research…
ClassificationGeneral ClassificationMalware ClassificationMalware DetectionScalable APT Malware Classification via Parallel Feature Extraction and GPU-Accelerated Learning
This paper presents an underlying framework for both automating and accelerating malware classification, more specifically, mapping malicious executables to known Advanced Persistent Threat (APT) groups. The main feature…
GPUMalware Classification