Obfuscated Malware Detection: Investigating Real-world Scenarios through Memory Analysis

2024-04-03 · S M Rakib Hasan, Aakar Dhakal

In the era of the internet and smart devices, the detection of malware has become crucial for system security. Malware authors increasingly employ obfuscation techniques to evade advanced security solutions, making it challenging to detect and eliminate threats. Obfuscated malware, adept at hiding itself, poses a significant risk to various platforms, including computers, mobile devices, and IoT devices. Conventional methods like heuristic-based or signature-based systems struggle against this type of malware, as it leaves no discernible traces on the system. In this research, we propose a simple and cost-effective obfuscated malware detection system through memory dump analysis, utilizing diverse machine-learning algorithms. The study focuses on the CIC-MalMem-2022 dataset, designed to simulate real-world scenarios and assess memory-based obfuscated malware detection. We evaluate the effectiveness of machine learning algorithms, such as decision trees, ensemble methods, and neural networks, in detecting obfuscated malware within memory dumps. Our analysis spans multiple malware categories, providing insights into algorithmic strengths and limitations. By offering a comprehensive assessment of machine learning algorithms for obfuscated malware detection through memory analysis, this paper contributes to ongoing efforts to enhance cybersecurity and fortify digital ecosystems against evolving and sophisticated malware threats. The source code is made open-access for reproducibility and future research endeavours. It can be accessed at https://bit.ly/MalMemCode.

📄 PDF Abstract BibTeX arXiv:2404.02372

Code (0)

등록된 구현이 없습니다.

Tasks

Malware Detection

Towards Obfuscated Malware Detection for Low Powered IoT Devices

2020-11-06 · Daniel Park, Hannah Powers, Benji Prashker, Leland Liu 외

With the increased deployment of IoT and edge devices into commercial and user networks, these devices have become a new threat vector for malware authors. It is imperative to protect these devices as they become more pr…

Malware Detection

DRLDO: A novel DRL based De-ObfuscationSystem for Defense against Metamorphic Malware

2021-02-01 · Mohit Sewak, Sanjay K. Sahay, Hemant Rathore

In this paper, we propose a novel mechanism to normalize metamorphic and obfuscated malware down at the opcode level and hence create an advanced metamorphic malware de-obfuscation and defense system. We name this system…

Deep Reinforcement Learning Intrusion Detection

Task-Aware Meta Learning-based Siamese Neural Network for Classifying Obfuscated Malware

2021-10-26 · Jinting Zhu, Julian Jang-Jaccard, Amardeep Singh, Paul A. Watters 외

Malware authors apply different techniques of control flow obfuscation, in order to create new malware variants to avoid detection. Existing Siamese neural network (SNN)-based malware detection methods fail to correctly …

Few-Shot Learning Malware Detection Meta-Learning

Obfuscated Memory Malware Detection

2024-08-23 · Sharmila S P, Aruna Tiwari, Narendra S Chaudhari

Providing security for information is highly critical in the current era with devices enabled with smart technology, where assuming a day without the internet is highly impossible. Fast internet at a cheaper price, not o…

Binary Classification Feature Engineering Malware Detection Multi-class Classification

Detecting new obfuscated malware variants: A lightweight and interpretable machine learning approach

2024-07-07 · Oladipo A. Madamidola, Felix Ngobigha, Adnane Ez-zizi

Machine learning has been successfully applied in developing malware detection systems, with a primary focus on accuracy, and increasing attention to reducing computational overhead and improving model interpretability. …

Interpretable Machine Learning Malware Detection