返回
TS-Mal: Malware detection model using temporal and structural features learning
DOI:10.1016/j.cose.2024.103752.png)
摘要
En 中文
The cyber ecosystem is facing severe threats from malware attacks, making it imperative to detect malware to safeguard a purified Internet environment. However, current studies primarily concentrate on examining the time -based correlation between APIs for malware detection while neglecting the contextual associations derived from API categories, resulting in inadequate detection performance. In this paper, we present TS-Mal, a novel Malware detection model incorporated Temporal and Structural features learning. Particularly, TS-Mal first designs a temporal vector learning method to automatically capture the evolving representation from the non-repetitive API sequences, which can efficiently pursue the attack preferences of malware. Then TS-Mal introduces heterogeneous graphs to model the interactive relationships between APIs and presents a denseinteractive structural embedding approach to generate the fine-grained API structural representation, which is capable of utilizing API category interaction information to boost detection effectiveness. Finally, TS-Mal simultaneously integrates temporal and structural attack features to accurately identify the unknown malware, effectively defending against new malware attacks. Experimental results on real -world datasets demonstrate that our proposed TS-Mal model outperforms existing state -of -the -art methods.
Keyword:
Malware detection
Graph attention network
API call events
Temporal feature
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Blood Pressure and Anthropometric Differences in Regularly Exercising and Nonexercising Black Adults
A feature-hybrid malware variants detection using CNN based opcode embedding and BPNN based API embedding使用基于CNN的操作码嵌入和基于BPNN的API嵌入的特征混合恶意软件变体检测
COMPUTERS & SECURITY
IF5.4
Monet: A User-Oriented Behavior-Based Malware Variants Detection System for AndroidMonet: 面向用户的基于行为的Android恶意软件变体检测系统

