Malware Classification with Word Embedding Features
Malware classification is an important and challenging problem in information security. Modern malware classification techniques rely on machine learning models that can be trained on features such as opcode sequences, API calls, and byte $n$-grams, among many others. In this research, we consider opcode features. We implement hybrid machine learning techniques, where we engineer feature vectors by training hidden Markov models -- a technique that we refer to as HMM2Vec -- and Word2Vec embeddings on these opcode sequences. The resulting HMM2Vec and Word2Vec embedding vectors are then used as features for classification algorithms. Specifically, we consider support vector machine (SVM), $k$-nearest neighbor ($k$-NN), random forest (RF), and convolutional neural network (CNN) classifiers. We conduct substantial experiments over a variety of malware families. Our experiments extend well beyond any previous work in this field.
Code (0)
등록된 구현이 없습니다.
Tasks
BIG-bench Machine LearningClassificationGeneral ClassificationHybrid Machine LearningMalware ClassificationSimilar Papers 제목 키워드 기반
A Comparison of Word2Vec, HMM2Vec, and PCA2Vec for Malware Classification
Word embeddings are often used in natural language processing as a means to quantify relationships between words. More generally, these same word embedding techniques can be used to quantify relationships between feature…
ClassificationFeature EngineeringGeneral ClassificationMalware Analysis+2TeamDL at SemEval-2018 Task 8: Cybersecurity Text Analysis using Convolutional Neural Network and Conditional Random Fields
In this work we present our participation to SemEval-2018 Task 8 subtasks 1 {\&} 2 respectively. We developed Convolution Neural Network system for malware sentence classification (subtask 1) and Conditional Random Field…
General ClassificationLEMMAPOSSentence+4Malware Classification Using Long Short-Term Memory Models
Signature and anomaly based techniques are the quintessential approaches to malware detection. However, these techniques have become increasingly ineffective as malware has become more sophisticated and complex. Research…
ClassificationGeneral ClassificationMalware ClassificationMalware DetectionA Comparison of Graph Neural Networks for Malware Classification
Managing the threat posed by malware requires accurate detection and classification techniques. Traditional detection strategies, such as signature scanning, rely on manual analysis of malware to extract relevant feature…
ClassificationGraph ClassificationGraph Neural NetworkMalware ClassificationWord Embedding Techniques for Malware Evolution Detection
Malware detection is a critical aspect of information security. One difficulty that arises is that malware often evolves over time. To maintain effective malware detection, it is necessary to determine when malware evolu…
Feature EngineeringMalware Detection