.png){kind=icon}
返回
A malware detection model based on imbalanced heterogeneous graph embeddings
.png){kind=icon}
PRE
AI
DOI：10.1016/j.eswa.2023.123109.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The proliferation of malware in recent years has posed a significant threat to the security of computers and mobile devices. Detecting malware, especially on the Android platform, has become a growing concern for researchers and the software industry. This paper proposes a new method for detecting Android malware based on unbalanced heterogeneous graph embedding. First of all, most malware datasets contain an imbalance of malicious and benign samples, since some types of malware are scarce and difficult to collect. Thus, as a result of this problem, the classification algorithm is unable to analyze the minority samples through sufficient data, resulting in poor downstream classifier performance, in light of the fact that adversarial generation networks possess the characteristic of completing data, an algorithm for generating graph structure data is presented, in which nodes are generated to simulate the distribution of minority nodes within a network topology. Then, considering that heterogeneous information networks have the characteristics of retaining rich node semantic features and mining implicit relationships, heterogeneous graphs are used to construct models for different types of entities (i.e. Apps, APIs, permissions, intents, etc.) and different meta-paths. Finally, a new method is introduced to alleviate the over-smoothing phenomenon of node information in the propagation of deep network. In the deep GCN, we first sample the leader nodes of each layer node, and then add a residual connection and an identity map in order to determine the characteristics of the high-order leader. In this paper, a self-attention-based semantic fusion method is also applied to adaptively fuse embedded representations of software nodes under different meta-paths. The test results demonstrate that the proposed IHODroid model effectively detects malicious software. In the DREBIN dataset, which consists of 123,453 Android applications and 5,560 malicious samples, the IHODroid model achieves an accuracy of 0.9360 and an F1 score of 0.9360, outperforming other state-of-the-art baseline methods.
Keyword:
Malware
Imbalanced networks
Generative adversarial networks
Heterogeneous graph
Representation learning
期刊
IF:
7.5
论文数:
3.0W
被引数:
10.2W
机构
引用论文
Static malware detection and attribution in android byte-code through an end-to-end deep system
PREAI
分享收藏
A statistical study of the potential dependence of a transfer coefficient supports the Marcus theory
PREAI
分享收藏Arsenic removal from aqueous solutions by adsorption using novel MIL-53(Fe) as a highly efficient adsorbent使用新型MIL-53(Fe) 作为高效吸附剂通过吸附从水溶液中去除砷.png)
RSC Advances
RSC AdvancesIF0
PREAI
分享收藏Regression Analysis for COVID-19 Infections and Deaths Based on Food Access and Health IssuesHealthcare
OAAI
HealthcareIF0
OAAI分享收藏Android malware detection through machine learning on kernel task structuresNEUROCOMPUTING
NEUROCOMPUTINGIF6.5
PREAI
分享收藏Predicting the drivers of behavioral intention to use mobile learning: A hybrid SEM-Neural Networks approach预测使用移动学习的行为意图的驱动因素: 混合SEM-神经网络方法
PREAI
分享收藏分享收藏
查看更多内容