Malware Classification Using Long Short-Term Memory Models
Signature and anomaly based techniques are the quintessential approaches to malware detection. However, these techniques have become increasingly ineffective as malware has become more sophisticated and complex. Researchers have therefore turned to deep learning to construct better performing model. In this paper, we create four different long-short term memory (LSTM) based models and train each to classify malware samples from 20 families. Our features consist of opcodes extracted from malware executables. We employ techniques used in natural language processing (NLP), including word embedding and bidirection LSTMs (biLSTM), and we also use convolutional neural networks (CNN). We find that a model consisting of word embedding, biLSTMs, and CNN layers performs best in our malware classification experiments.
Code (0)
등록된 구현이 없습니다.
Tasks
ClassificationGeneral ClassificationMalware ClassificationMalware DetectionSimilar Papers 제목 키워드 기반
An Empirical Analysis of Image-Based Learning Techniques for Malware Classification
In this paper, we consider malware classification using deep learning techniques and image-based features. We employ a wide variety of deep learning techniques, including multilayer perceptrons (MLP), convolutional neura…
Deep LearningGeneral ClassificationMalware ClassificationTransfer LearningPredicting Domain Generation Algorithms with Long Short-Term Memory Networks
Various families of malware use domain generation algorithms (DGAs) to generate a large number of pseudo-random domain names to connect to a command and control (C&C) server. In order to block DGA C&C traffic, security o…
Binary ClassificationA Natural Language Processing Approach to Malware Classification
Many different machine learning and deep learning techniques have been successfully employed for malware detection and classification. Examples of popular learning techniques in the malware domain include Hidden Markov M…
ClassificationFeature EngineeringMalware ClassificationMalware DetectionCNN-LSTM and Transfer Learning Models for Malware Classification based on Opcodes and API Calls
In this paper, we propose a novel model for a malware classification system based on Application Programming Interface (API) calls and opcodes, to improve classification accuracy. This system uses a novel design of combi…
ClassificationMalware ClassificationTransfer LearningMultimodal Techniques for Malware Classification
The threat of malware is a serious concern for computer networks and systems, highlighting the need for accurate classification techniques. In this research, we experiment with multimodal machine learning approaches for …
ClassificationMalware Classification