.png){kind=icon}
返回
MCTVD: A malware classification method based on three-channel visualization and deep learning
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.103084.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
With the rapid increase in the number of malware, the detection and classification of malware have become more challenging. In recent years, many malware classification methods based on malware visualization and deep learning have been proposed. However, the malware images generated by these methods do not retain the semantic and statistical properties with a small and uniform size. This article gives definitions of extracted content and filling mode to characterize the critical factors for the malware visualization task and proposes a new malware visualization method based on assembly instructions and Markov transfer matrices to characterize malware. Thus, a m alware c lassification method based on t hreechannel v isualization and d eep learning (MCTVD) is proposed. In MCTVD, its malware image has a small and uniform size, and its convolutional neural network has few convolutional and pooling layers. Experimental results show that MCTVD can achieve an accuracy of 99.44% on Microsoft's public malware dataset under 10-fold cross-validation and thus could be a highly competitive candidate for malware classification.
Keyword:
Malware classification
Malware visualization
Markov transfer matrix
Deep learning
Convolutional neural network
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
分享收藏
DMalNet: Dynamic malware analysis based on API feature engineering and graph learningDMalNet: 基于API特征工程和图学习的动态恶意软件分析.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容