.png){kind=icon}
Return
Malware detection with dynamic evolving graph convolutional networks
.png){kind=icon}
PRE
AI
DOI：10.1002/int.22880.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Malware detection is a vital task for cybersecurity. For malware dynamic behavior, threats come from a small number of Application Programming Interfaces (APIs) embedded in the API sequences, which are easily ignored or obfuscated in the detection process. Prior works proposed graph-based learning methods to solve this problem using API-level behavior relations. However, the malware detection is still challenging, due to the ignore of the temporal correlation between malicious behaviors. In this study, we model the software behaviors with multiscaled API graph sequences to represent API-level behaviors as well as graph-level temporal behavior correlations. We then propose a novel Dynamic Evolving Graph Convolutional Network (DEGCN) model to capture dynamic evolving pattern of both local API-level and global graph-level software behaviors. In particular, we first extract the API-level (node) representations to capture the directed graph representations for each time slot. We then propose a Graph-encoding-based Gate Recurrent Unit (GGRU) network to capture the graph-level evolving features and their evolving status. The graph features of different time slots and different graph scales are concatenated to detect whether the software is benign or malicious. Our evaluation with two public benchmarks reports that DEGCN achieves the best performance compared with state-of-the-art algorithms.
Keywords:
API graph sequence
dynamic evolving
graph convolutional network
malware detection
Journal
IF:
3.7
Papers:
3.1K
Citations:
8.1K
Organization
Cited Papers
S3Feature: A static sensitive subgraph-based feature for android malware detection.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
ShareSaveOscillatory activity is not evident in the primate temporal visual cortex with static stimuliNeuroReport
NeuroReportIF0
PREAI
ShareSave
ShareSaveShareSave
View more