Generating Synthetic Malware Samples Using Generative AI

doi:10.1109/ACCESS.2025.3556704

Generating Synthetic Malware Samples Using Generative AI

2025-01-01

0

OA

AI

DOI：10.1109/ACCESS.2025.3556704

原文链接

原文求助

摘要

En 中文

Malware attacks have a significant negative impact on organizations of varied scales in the field of cybersecurity. Recently, malware researchers have increasingly turned to machine learning techniques to combat sophisticated obfuscation methods used in malware. However, collecting a diverse set of malware samples with various obfuscation techniques is challenging and often takes years, especially for newly developed malware. This issue is further compounded by a well-known limitation of machine learning models: their poor performance when training data is scarce. In this paper, we propose a new system for generating synthetic malware samples to augment imbalanced malware dataset. Our approach decomposes malware binary samples into mnemonic opcode sequences, leveraging natural language processing to extract contextual meaning behind malware opcode features to aid the learning of generative AI (GenAI) employed in this paper, Generative Adversarial Networks (GAN), Wasserstein Generative Adversarial Networks with Gradient Penalty (WGAN-GP), and a modified Diffusion model. The experiment results show that augmenting training data with Diffusion-based synthetic data significantly improves classification performance for minor classes by up to 60% on average. This enhancement ultimately leads to an overall malware classification performance of 96%, an 8% improvement. These findings demonstrate the high quality and fidelity of the synthetic data, its robustness, and its potential applications in malware analysis. Specifically, synthetic malware data proves effective in improving the classification of minor malware classes and detection rates, even though the size of known malware data is significantly small.

Keyword:

Computer viruses

Hidden Markov models

Training

Natural language processing

Generative adversarial networks

Feature extraction

Vectors

Data models

Synthetic data

Robustness

Diffusion

GAN

generative AI

malware

natural language processing

machine learning

imbalanced datasets

data augmentation

Generating Synthetic Malware Samples Using Generative AI

摘要

期刊

机构

引用论文