arrow
Return

Long short-term memory-based Malware classification method for information security

delete2019-07-01
delete48
PRE
AI
J
Jungho Kang
S
Sejun Jang
李书宇 cover
李书宇 (Shuyu Li)
Y
Young‐Sik Jeong
Y
Yunsick Sung *
DOI:10.1016/j.compeleceng.2019.06.014delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Signature-based malware detection approaches are inadequate for detecting the increasingly intelligent and large number of malware programs emerging today. Therefore, alternative approaches are required. The effects of malware can be estimated by analyzing the opcodes in its executable files. It can then be classified into families using a long short-term memory (LSTM) network. Vectorizing opcodes and application programming interface (API) function names using one-hot encoding results in high-dimensional vectors because each case is represented using one dimension. Therefore, this paper proposes a word2vec-based LSTM method to analyze opcodes and API function names using fewer dimensions. The results of opcode and API function name classification using the proposed method and one-hot encoding were compared using the Microsoft Malware Classification Challenge dataset. The proposed method showed approximately 0.5% higher performance than the one-hot encoding-based approach. (C) 2019 Elsevier Ltd. All rights reserved.
Keywords:
Malware classification
Security
Deep learning
Static analysis
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

C
Computers and Electrical Engineering
IF:
4.9
Papers:
6.7K
Citations:
1.3W

Organization

D
Dongguk University
Scholars:
8.2K
Papers: 9.3K
Citations: 1.0W