Towards Interpretable Ensemble Learning for Image-based Malware Detection

2021-01-13 · Yuzhou Lin, Xiaolin Chang

Deep learning (DL) models for image-based malware detection have exhibited their capability in producing high prediction accuracy. But model interpretability is posing challenges to their widespread application in security and safety-critical application domains. This paper aims for designing an Interpretable Ensemble learning approach for image-based Malware Detection (IEMD). We first propose a Selective Deep Ensemble Learning-based (SDEL) detector and then design an Ensemble Deep Taylor Decomposition (EDTD) approach, which can give the pixel-level explanation to SDEL detector outputs. Furthermore, we develop formulas for calculating fidelity, robustness and expressiveness on pixel-level heatmaps in order to assess the quality of EDTD explanation. With EDTD explanation, we develop a novel Interpretable Dropout approach (IDrop), which establishes IEMD by training SDEL detector. Experiment results exhibit the better explanation of our EDTD than the previous explanation methods for image-based malware detection. Besides, experiment results indicate that IEMD achieves a higher detection accuracy up to 99.87% while exhibiting interpretability with high quality of prediction results. Moreover, experiment results indicate that IEMD interpretability increases with the increasing detection accuracy during the construction of IEMD. This consistency suggests that IDrop can mitigate the tradeoff between model interpretability and detection accuracy.

📄 PDF Abstract BibTeX arXiv:2101.04889

Code (0)

등록된 구현이 없습니다.

Tasks

Ensemble Learning Malware Detection

Methods 이 논문이 사용한 방법론

Dropout Dropout is a regularization technique for neural networks that drops a unit (along with connections) at training time with a specified probability $p$ (a common value is…

Explainable Attention-Guided Stacked Graph Neural Networks for Malware Detection

2025-08-13 · Hossein Shokouhinejad, Roozbeh Razavi-Far, Griffin Higgins, Ali A Ghorbani arxiv

Malware detection in modern computing environments demands models that are not only accurate but also interpretable and robust to evasive techniques. Graph neural networks (GNNs) have shown promise in this domain by mode…

Malware Detection

High Accuracy Android Malware Detection Using Ensemble Learning

2016-08-02 · Suleiman Y. Yerima, Sakir Sezer, Igor Muttik

With over 50 billion downloads and more than 1.3 million apps in the Google official market, Android has continued to gain popularity amongst smartphone users worldwide. At the same time there has been a rise in malware …

Android Malware Detection BIG-bench Machine Learning Ensemble Learning Malware Detection+1

I-MAD: Interpretable Malware Detector Using Galaxy Transformer

2019-09-15 · Miles Q. Li, Benjamin C. M. Fung, Philippe Charland, Steven H. H. Ding

Malware currently presents a number of serious threats to computer users. Signature-based malware detection methods are limited in detecting new malware samples that are significantly different from known ones. Therefore…

BIG-bench Machine Learning Malware Detection

Malware Detection Using Frequency Domain-Based Image Visualization and Deep Learning

2021-01-26 · Tajuddin Manhar Mohammed, Lakshmanan Nataraj, Satish Chikkagoudar, Shivkumar Chandrasekaran 외

We propose a novel method to detect and visualize malware through image classification. The executable binaries are represented as grayscale images obtained from the count of N-grams (N=2) of bytes in the Discrete Cosine…

Binary Classification Classification General Classification image-classification+3

Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection

2020-06-30 · Deqiang Li, Qianmu Li

Malware remains a big threat to cyber security, calling for machine learning based malware detection. While promising, such detectors are known to be vulnerable to evasion attacks. Ensemble learning typically facilitates…