Word Embedding Techniques for Malware Evolution Detection
Malware detection is a critical aspect of information security. One difficulty that arises is that malware often evolves over time. To maintain effective malware detection, it is necessary to determine when malware evolution has occurred so that appropriate countermeasures can be taken. We perform a variety of experiments aimed at detecting points in time where a malware family has likely evolved, and we consider secondary tests designed to confirm that evolution has actually occurred. Several malware families are analyzed, each of which includes a number of samples collected over an extended period of time. Our experiments indicate that improved results are obtained using feature engineering based on word embedding techniques. All of our experiments are based on machine learning models, and hence our evolution detection strategies require minimal human intervention and can easily be automated.
Code (0)
등록된 구현이 없습니다.
Tasks
Feature EngineeringMalware DetectionSimilar Papers 제목 키워드 기반
Machine Learning for Malware Evolution Detection
Malware evolves over time and antivirus must adapt to such evolution. Hence, it is critical to detect those points in time where malware has evolved so that appropriate countermeasures can be undertaken. In this research…
BIG-bench Machine LearningMalware Classification Using Long Short-Term Memory Models
Signature and anomaly based techniques are the quintessential approaches to malware detection. However, these techniques have become increasingly ineffective as malware has become more sophisticated and complex. Research…
ClassificationGeneral ClassificationMalware ClassificationMalware DetectionA Comparison of Word2Vec, HMM2Vec, and PCA2Vec for Malware Classification
Word embeddings are often used in natural language processing as a means to quantify relationships between words. More generally, these same word embedding techniques can be used to quantify relationships between feature…
ClassificationFeature EngineeringGeneral ClassificationMalware Analysis+2MalTree: Tracing Malware Evolution from Embeddings at Scale
Malware detection remains largely reactive: machine learning models trained on known samples degrade as threats evolve. Understanding evolutionary relationships among malware families can inform proactive defense, but tr…
Malware DetectionRecent Advances in Malware Detection: Graph Learning and Explainability
The rapid evolution of malware has necessitated the development of sophisticated detection methods that go beyond traditional signature-based approaches. Graph learning techniques have emerged as powerful tools for model…
Feature EngineeringGraph EmbeddingGraph LearningMalware Analysis+2