.png){kind=icon}
返回
DTMIC: Deep transfer learning for malware image classification
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jisa.2021.103063.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In the ever-changing cyber threat landscape, evolving malware threats demand a new technique for their detection. This paper puts forward a strategy for distinguishing malware programs based on transfer learning procedures. The proposed method, known as DTMIC - deep transfer learning for malware image classification, leverages the capabilities of deep Convolutional Neural Network (CNN) architecture previously trained with ImageNet dataset (> 10 million images) for malware classification. Window's portable executable files (PEs) are converted into grayscale images, with the perception that similar malware families fundamentally show the same characteristics when represented as visualized images. Grayscale images serve as input to the customized deep CNN architecture. Features extracted from the convolutional layers of the deep CNN model are flattened and fed into a fully connected dense layer. In addition, to avoid the overfitting problem that many CNN models face, a regularization technique called Early Stopping is employed to monitor the validation loss with configured parameters. The effectiveness and robustness of the model are evaluated on two benchmark datasets - the MalImg dataset (9339 malware samples of 25 families) and the Microsoft BIG dataset (10868 malware samples of 9 families). DTMIC achieved 98.92% test accuracy for MalImg datasets and 93.19% for Microsoft datasets. For comparative analysis, well-established CNN architectures such as VGG16, VGG19, ResNet50, and Google's inceptionV3 are implemented, both as a feature extractor and a classifier. Experimental results reveal that the proposed DTMIC method outperforms the selected baseline models and is resilient to packed and encrypted malware. Moreover, this study validates the model's efficacy on recent and real-world malware samples collected on Honeypots in the wild, with an accuracy of 96.43%.
Keyword:
Information security
Malware classification
Malware visualization
Deep learning
Transfer learning
期刊
IF:
3.7
论文数:
2.0K
被引数:
4.9K
机构
引用论文
Image-Based malware classification using ensemble of CNN architectures (IMCEC).png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Static malware detection and attribution in android byte-code through an end-to-end deep system
PREAI
分享收藏“The Hand that Rocks the Cradle Should Rock the U. of C.”: The Faculty Wife and the Feminist Era
PREAI
分享收藏分享收藏MalFCS: An effective malware classification framework with automated feature extraction based on deep convolutional neural networksMalFCS: 基于深度卷积神经网络的自动特征提取的有效恶意软件分类框架
PREAI
分享收藏
查看更多内容