.png){kind=icon}
返回
Malware Speaks! Deep Learning Based Assembly Code Processing for Detecting Evasive Cryptojacking
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2023.3307445.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The increasing prevalence of blockchain-based cryptocurrencies as a payment instrument in the past decade and the rewards earned by the cryptominers has resulted in a new class of cyber attacks, cryptojacking, which involves unauthorized mining of cryptocurrencies on someone's system. Spotting cryptojacking is difficult in many cases, since the relevant software tries to disguise its presence to evade detection, by mimicking benign software such as compression applications by performing similar bitwise, cryptographic, and encryption operations. In this paper, we propose the processing of assembly code-a fundamental and platform-independent programming language-as a natural language using deep learning for profiling applications, which we call Deep Code Profiler (DeCode Pro). Our proposed solution leverages the immutable step of any cyber attack: the deployment of instructions in system memory to carry out the attack. Through extensive experimentation with different neural network architectures in the profiling stage, we show that DeCode Pro is highly effective in the detection of evasive cryptojacking attacks and achieves low false positive and false negative rates. We also show that the model achieves high classification accuracy even with limited training data, which can considerably reduce the computing resources required for training and retraining the deep learning model.
Keyword:
Deep learning
Malware
Cyberattack
Codes
Feature extraction
Blockchains
Natural language processing
Assembly code
cryptojacking
cryptomining
deep learning
LSTM
natural language processing
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
Retinotectal reorganization in goldfish—II. Effects of partial tectal ablation and constant light on the retina.png)
Neuroscience
NeuroscienceIF0
PREAI
分享收藏分享收藏Anterior chamber‐associated immune deviation‐inducing cells activate T cells, and rescue them from antigen‐induced apoptosisImmunology
OAAI
ImmunologyIF0
OAAI分享收藏
查看更多内容