Multimodal Techniques for Malware Classification
The threat of malware is a serious concern for computer networks and systems, highlighting the need for accurate classification techniques. In this research, we experiment with multimodal machine learning approaches for malware classification, based on the structured nature of the Windows Portable Executable (PE) file format. Specifically, we train Support Vector Machine (SVM), Long Short-Term Memory (LSTM), and Convolutional Neural Network (CNN) models on features extracted from PE headers, we train these same models on features extracted from the other sections of PE files, and train each model on features extracted from the entire PE file. We then train SVM models on each of the nine header-sections combinations of these baseline models, using the output layer probabilities of the component models as feature vectors. We compare the baseline cases to these multimodal combinations. In our experiments, we find that the best of the multimodal models outperforms the best of the baseline cases, indicating that it can be advantageous to train separate models on distinct parts of Windows PE files.
Code (0)
등록된 구현이 없습니다.
Tasks
ClassificationMalware ClassificationMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Malware Images:Visualization and Automatic Classification
We propose a simple yet effective method for visualizing and classifying malware using image processing techniques. Malware binaries are visualized as gray-scale images, with the observation that for many malware familie…
ClassificationOn the Limitations of Continual Learning for Malware Classification
Malicious software (malware) classification offers a unique challenge for continual learning (CL) regimes due to the volume of new samples received on a daily basis and the evolution of malware to exploit new vulnerabili…
Continual LearningGeneral ClassificationIncremental LearningMalware ClassificationBehavioral Malware Classification using Convolutional Recurrent Neural Networks
Behavioral malware detection aims to improve on the performance of static signature-based techniques used by anti-virus systems, which are less effective against modern polymorphic and metamorphic malware. Behavioral mal…
Behavioral Malware ClassificationBehavioral Malware DetectionClassificationDiversity+3Generative Adversarial Networks and Image-Based Malware Classification
For efficient malware removal, determination of malware threat levels, and damage estimation, malware family classification plays a critical role. In this paper, we extract features from malware executable files and repr…
BIG-bench Machine LearningClassificationMalware ClassificationMalware DetectionAssessing the Impact of Packing on Machine Learning-Based Malware Detection and Classification Systems
The proliferation of malware, particularly through the use of packing, presents a significant challenge to static analysis and signature-based malware detection techniques. The application of packing to the original exec…
Malware Detection