.png){kind=icon}
.png){kind=icon}
Return
TS-Mal: Malware detection model using temporal and structural features learning
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2024.103752.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The cyber ecosystem is facing severe threats from malware attacks, making it imperative to detect malware to safeguard a purified Internet environment. However, current studies primarily concentrate on examining the time -based correlation between APIs for malware detection while neglecting the contextual associations derived from API categories, resulting in inadequate detection performance. In this paper, we present TS-Mal, a novel Malware detection model incorporated Temporal and Structural features learning. Particularly, TS-Mal first designs a temporal vector learning method to automatically capture the evolving representation from the non-repetitive API sequences, which can efficiently pursue the attack preferences of malware. Then TS-Mal introduces heterogeneous graphs to model the interactive relationships between APIs and presents a denseinteractive structural embedding approach to generate the fine-grained API structural representation, which is capable of utilizing API category interaction information to boost detection effectiveness. Finally, TS-Mal simultaneously integrates temporal and structural attack features to accurately identify the unknown malware, effectively defending against new malware attacks. Experimental results on real -world datasets demonstrate that our proposed TS-Mal model outperforms existing state -of -the -art methods.
Keywords:
Malware detection
Graph attention network
API call events
Temporal feature
Journal
C
IF:
5.4
Papers:
4.6K
Citations:
1.4W