Representation learning with function call graph transformations for malware open set recognition
Open set recognition (OSR) problem has been a challenge in many machine learning (ML) applications, such as security. As new/unknown malware families occur regularly, it is difficult to exhaust samples that cover all the classes for the training process in ML systems. An advanced malware classification system should classify the known classes correctly while sensitive to the unknown class. In this paper, we introduce a self-supervised pre-training approach for the OSR problem in malware classification. We propose two transformations for the function call graph (FCG) based malware representations to facilitate the pretext task. Also, we present a statistical thresholding approach to find the optimal threshold for the unknown class. Moreover, the experiment results indicate that our proposed pre-training process can improve different performances of different downstream loss functions for the OSR problem.
Code (0)
등록된 구현이 없습니다.
Tasks
Malware ClassificationOpen Set LearningRepresentation LearningSimilar Papers 제목 키워드 기반
Classifying Malware Using Function Representations in a Static Call Graph
We propose a deep learning approach for identifying malware families using the function call graphs of x86 assembly instructions. Though prior work on static call graph analysis exists, very little involves the applicati…
Feature EngineeringMalware ClassificationMalware Family DetectionMal2GCN: A Robust Malware Detection Approach Using Deep Graph Convolutional Networks With Non-Negative Weights
With the growing pace of using Deep Learning (DL) to solve various problems, securing these models against adversaries has become one of the main concerns of researchers. Recent studies have shown that DL-based malware d…
Malware DetectionHiGraph: A Large-Scale Hierarchical Graph Dataset for Malware Analysis
The advancement of graph-based malware analysis is critically limited by the absence of large-scale datasets that capture the inherent hierarchical structure of software. Existing methods often oversimplify programs into…
Explainable Malware Detection through Integrated Graph Reduction and Learning Techniques
Control Flow Graphs and Function Call Graphs have become pivotal in providing a detailed understanding of program execution and effectively characterizing the behavior of malware. These graph-based representations, when …
Decision MakingMalware DetectionMASKDROID: Robust Android Malware Detection with Masked Graph Representations
Android malware attacks have posed a severe threat to mobile users, necessitating a significant demand for the automated detection system. Among the various tools employed in malware detection, graph representations (e.g…
Android Malware DetectionGraph Neural NetworkMalware Detection