.png){kind=icon}
返回
MalSensor: Fast and Robust Windows Malware Classification
.png){kind=icon}
OA
AI
DOI：10.1145/3688833.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Driven by the substantial profits, the evolution of Portable Executable (PE) malware has posed persistent threats. PE malware classification has been an important research field, and numerous classification methods have been proposed. With the development of machine learning, learning-based static classification methods achieve excellent performance. However, most existing methods cannot meet the requirements of industrial applications due to the limited resource consumption and concept drift. In this article, we propose a fast, high-accuracy, and robust FCG-based PE malware classification method. We first extract precise function call relationships through code and data cross-referencing analysis. Then we normalize function names to construct a concise and accurate function call graph. Furthermore, we perform topological analysis of the function call graph using social network analysis techniques, thereby enhancing the program function call features. Finally, we use a series of machine learning algorithms for classification. We implement a prototype system named MalSensor and compare it with nine state-of-the-art static PE malware classification methods. The experimental results show that MalSensor is capable of classifying a malicious file in 0.7 seconds on average with up to 98.35% accuracy, which represents a significant advantage over existing methods.
Keyword:
Malware Semantic Analysis
Centrality
Disassembly
期刊
A
IF:
6.2
论文数:
1.2K
被引数:
3.4K
机构
引用论文
Image-Based malware classification using ensemble of CNN architectures (IMCEC).png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Redox behaviour of mixed-ligand five-coordinate cobalt(I) complexes with isocyanides and phosphines
PREAI
分享收藏分享收藏An Efficient Algorithm for Nonlinear Model Predictive Control of Large-Scale Systems Part I: Description of the Method (Ein effizienter Algorithmus für die nichtlineare prädiktive Regelung großer Systeme Teil I: Methodenbeschreibung)大型系统非线性模型预测控制的有效算法第一部分: 方法的描述 (Ein effizienter algorithms f ü r die nichtlineare pr ä diktive Regelung gro ß er Systeme Teil I: Methodenbeschreibung)auto
autoIF0
PREAI
分享收藏
查看更多内容