Malware Classification using Deep Learning based Feature Extraction and Wrapper based Feature Selection Technique
In the case of malware analysis, categorization of malicious files is an essential part after malware detection. Numerous static and dynamic techniques have been reported so far for categorizing malware. This research presents a deep learning-based malware detection (DLMD) technique based on static methods for classifying different malware families. The proposed DLMD technique uses both the byte and ASM files for feature engineering, thus classifying malware families. First, features are extracted from byte files using two different Deep Convolutional Neural Networks (CNN). After that, essential and discriminative opcode features are selected using a wrapper-based mechanism, where Support Vector Machine (SVM) is used as a classifier. The idea is to construct a hybrid feature space by combining the different feature spaces to overcome the shortcoming of particular feature space and thus, reduce the chances of missing a malware. Finally, the hybrid feature space is used to train a Multilayer Perceptron, which classifies all nine different malware families. Experimental results show that proposed DLMD technique achieves log-loss of 0.09 for ten independent runs. Moreover, the proposed DLMD technique's performance is compared against different classifiers and shows its effectiveness in categorizing malware. The relevant code and database can be found at https://github.com/cyberhunters/Malware-Detection-Using-Machine-Learning.
Code (1)
Tasks
Feature Engineeringfeature selectionGeneral ClassificationMalware AnalysisMalware ClassificationMalware DetectionSimilar Papers 제목 키워드 기반
Novel Feature Extraction, Selection and Fusion for Effective Malware Family Classification
Modern malware is designed with mutation characteristics, namely polymorphism and metamorphism, which causes an enormous growth in the number of variants of malware samples. Categorization of malware samples on the basis…
Computer SecurityGeneral ClassificationMalware ClassificationDecoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance
Many studies have proposed machine-learning (ML) models for malware detection and classification, reporting an almost-perfect performance. However, they assemble ground-truth in different ways, use diverse static- and dy…
ClassificationMalware ClassificationMalware DetectionOrthrus: A Bimodal Learning Architecture for Malware Classification
Malware detection and classification is a challenging problem and an active area of research. Traditional machine learning methods depend almost entirely on the ability to extract a set of discriminative features into wh…
ClassificationDeep LearningFeature EngineeringGeneral Classification+2A Comparison of Graph Neural Networks for Malware Classification
Managing the threat posed by malware requires accurate detection and classification techniques. Traditional detection strategies, such as signature scanning, rely on manual analysis of malware to extract relevant feature…
ClassificationGraph ClassificationGraph Neural NetworkMalware ClassificationAndroid Malware Detection Based on RGB Images and Multi-feature Fusion
With the widespread adoption of smartphones, Android malware has become a significant challenge in the field of mobile device security. Current Android malware detection methods often rely on feature engineering to const…
Android Malware DetectionEdge DetectionFeature Engineeringimage-classification+2