arrow
Return

Hardware-Assisted Malware Detection and Localization Using Explainable Machine Learning

delete2022-01-01
delete19
delete
OA
AI
Z
Zhixin Pan *
J
Jennifer Sheldon
P
Prabhat Mishra
DOI:10.1109/TC.2022.3150573delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Malicious software, popularly known as malware, is widely acknowledged as a serious threat to modern computing systems. Software-based solutions, such as anti-virus software (AVS), are not effective since they rely on matching patterns that can be easily fooled by carefully crafted malware with obfuscation or other deviation capabilities. While recent malware detection methods provide promising results through an effective utilization of hardware features, the detection results cannot be interpreted in a meaningful way. In this paper, we propose a hardware-assisted malware detection framework using explainable machine learning. This paper makes three important contributions. First, we theoretically establish that our proposed method can provide an interpretable explanation of classification results to address the challenge of transparency. Next, we show that the explainable outcome through effective utilization of hardware performance counters and embedded trace buffer can lead to accurate localization of malicious behavior. Finally, we have performed efficiency versus accuracy trade-off analysis using decision tree and recurrent neural networks. Extensive evaluation using a wide variety of real-world malware dataset demonstrates that our framework can produce accurate and human-understandable malware detection results with provable guarantees.
Keywords:
Malware detection
explainable machine learning
hardware-assisted security
trustworthy systems

Journal

IEEE Transactions on Computers cover
IEEE Transactions on Computers
IF:
3.8
Papers:
5.4K
Citations:
9.8K

Organization

State University System of Florida cover
State University System of Florida
Scholars:
12.8W
Papers: 10.9W
Citations: 130
Cited Papers

Cited Papers

Magnetic Structure of Inorganic–Organic Hybrid (C6H5CH2CH2NH3)2MnCl4 Using Magnetic Space Group Concept
err2020-11-30
err0
errOAAI
errGaram Park; In-Hwan Oh; J. M. Sungil Park; Seungsoo Hahn; Seong-Hun Park
errShare
errSave
Genetic variation and evolution of Polaskia chichipe (Cactaceae) under domestication in the Tehuacán Valley, central Mexico
err2005-03-29
err0
PREAI
errADRIANA OTERO‐ARNAIZ; ALEJANDRO CASAS; JAMES L. HAMRICK; JENNIFER CRUSE‐SANDERS
errShare
errSave
High pressure synthesis, crystal structure and physical properties of a new Ni(ii) perovskite BiNiO3
err2002-10-15
err0
PREAI
errShintaro Ishiwata; Masaki Azuma; Mikio Takano; Eiji Nishibori; Masaki Takata; Makoto Sakata; Kenichi Kato
errShare
errSave
Two-dimensional bricklayer arrangements of tolans using halogen bonding interactions
err2015-01-01
err0
PREAI
errFanny Frausto; Zachary C. Smith; Terry E. Haas; Samuel W. Thomas III
errShare
errSave
Effects of Amoxapine and Imipramine on Evoked Potentials in the Continuous Performance Test in Patients with Affective Disorder
err1988-01-01
err0
PREAI
errMonte S. Buchsbaum; Sunghoon Lee; Richard Haier; Joseph C. Wu; Mary Green; Wa Tang
errShare
errSave
researcher View more