Return
Sequential opcode embedding-based malware detection method
DOI:10.1016/j.compeleceng.2022.107703.png)
Abstract
En 中文
In recent years, researchers have focused on uncovering the distinctive malicious patterns of malware samples through opcode sequences using some feature learning methods to improve the accuracy of malware detection mechanisms. However, opcode sequences are often very long. Thus, the feature learning process is to be time-consuming when using the entire sequence or could be ineffective when only a partial part of the sequence is used. In this work, we propose a new malware detection approach, called Sequential Opcode Embedding-based Malware Detection (SOEMD), which aims at capturing common malicious patterns in sequential opcodes. To avoid dealing with the long opcode sequences, SOEMD uses Random walk approach with edge and node selection processes. The proposed method constructs a new vector space that consists of low-dimensional sequential opcode embeddings using an embedding method. Experimental results demonstrate that SOEMD outperforms the baseline methods and provides 100% malware detection.
Keywords:
Malware detection
Opcode sequence
Embedding
Random walk
Static analysis
Opcode graph
Journal
C
IF:
4.9
Papers:
6.7K
Citations:
1.3W
Organization
Cited Papers
A feature-hybrid malware variants detection using CNN based opcode embedding and BPNN based API embedding
COMPUTERS & SECURITY
IF5.4
Allosteric Regulation in Phosphofructokinase from the Extreme Thermophile Thermus thermophilus
Biochemistry
IF0

