Abstract:Malware is one of the most significant threats in today’s computing world since the number of websites distributing malware is increasing at a rapid rate. Malware analysis and prevention methods are increasingly becoming necessary for computer systems connected to the Internet. This software exploits the system’s vulnerabilities to steal valuable information without the user’s knowledge, and stealthily send it to remote servers controlled by attackers. Traditionally, anti-malware products use signatures for detecting known malware. However, the signature-based method does not scale in detecting obfuscated and packed malware. Considering that the cause of a problem is often best understood by studying the structural aspects of a program like the mnemonics, instruction opcode, API Call, etc. In this paper, we investigate the relevance of the features of unpacked malicious and benign executables like mnemonics, instruction opcodes, and API to identify a feature that classifies the executable. Prominent features are extracted using Minimum Redundancy and Maximum Relevance (mRMR) and Analysis of Variance (ANOVA). Experiments were conducted on four datasets using machine learning and deep learning approaches such as Support Vector Machine (SVM), Naïve Bayes, J48, Random Forest (RF), and XGBoost. In addition, we also evaluate the performance of the collection of deep neural networks like Deep Dense network, One-Dimensional Convolutional Neural Network (1D-CNN), and CNN-LSTM in classifying unknown samples, and we observed promising results using APIs and system calls. On combining APIs/system calls with static features, a marginal performance improvement was attained comparing models trained only on dynamic features. Moreover, to improve accuracy, we implemented our solution using distinct deep learning methods and demonstrated a fine-tuned deep neural network that resulted in an F1-score of 99.1% and 98.48% on Dataset-2 and Dataset-3, respectively.

Advanced Cybersecurity Enhancement through Mathematical Models: A Comprehensive Approach Using Statistical Methods, Cryptographic Techniques, and Machine Learning Algorithms (SVM, Random Forest, and Neural Networks) for Behavior-Based Malware Detection

Malware Analysis Using Machine Learning and Deep Learning Techniques

Different Mechanisms of Machine Learning and Optimization Algorithms Utilized in Intrusion Detection Systems

Artificial Intelligence-Based Malware Detection, Analysis, and Mitigation

Malware Analysis and Detection Using Machine Learning Algorithms

Evaluation of Machine Learning Algorithms for Malware Detection

Harnessing the Speed and Accuracy of Machine Learning to Advance Cybersecurity

A study on malicious software behaviour analysis and detection techniques: Taxonomy, current trends and challenges

Enhancing Malware Detection by Integrating Machine Learning with Cuckoo Sandbox

Malware detection system based on static and dynamic analysis and using machine learning

Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine (SVM) for Malware Classification

Malware Detection Module using Machine Learning Algorithms to Assist in Centralized Security in Enterprise Networks

Malicious Code Detection Using Machine Learning

Cybersecurity Threats and Their Mitigation Approaches Using Machine Learning—A Review

Artificial Intelligence Algorithms for Malware Detection in Android-Operated Mobile Devices

An Efficient DenseNet-Based Deep Learning Model for Malware Detection

NeuroCyberGuard: Developing a Robust Cybersecurity Defense System through Deep Neural Learning-Based Mathematical Modeling

A Hybrid Optimization Model for Efficient Detection and Classification of Malware in the Internet of Things

Proactive Threat Hunting in Critical Infrastructure Protection through Hybrid Machine Learning Algorithm Application

Cyber Intrusion Detection Using Machine Learning Classification Techniques

Detection of Malicious Software by Analyzing Distinct Artifacts Using Machine Learning and Deep Learning Algorithms