Abstract:Visualization-based malware detection gets more and more attention for detecting sophisticated malware that traditional antivirus software may miss. The approach involves creating a visual representation of the memory or portable executable files (PEs). However, most current visualization-based malware classification models focus on convolution neural networks instead of Vision transformers (ViT) even though ViT has a higher performance and captures the spatial representation of malware. Therefore, more research should be performed on malware classification using vision transformers. This paper proposes a multi-variants vision transformer-based malware image classification model using multi-criteria decision-making. The proposed method employs Multi-variants transformer encoders to show different visual representation embeddings sets of one malware image. The proposed architecture contains five steps: (1) patch extraction and embeddings, (2) positional encoding, (3) multi-variants transformer encoders, (4) classification, and (5) decision-making. The variants of transformer encoders are transfer learning-based models i.e., it was originally trained on ImageNet dataset. Moreover, the proposed malware classifier employs MEREC-VIKOR, a hybrid standard evaluation approach, which combines multi-inconsistent performance metrics. The performance of the transformer encoder variants is assessed both on individual malware families and across the entire set of malware families within two datasets i.e., MalImg and Microsoft BIG datasets achieving overall accuracy 97.64 and 98.92 respectively. Although the proposed method achieves high performance, the metrics exhibit inconsistency across some malware families. The results of standard evaluation metrics i.e., Q, R, and U show that TE3 outperform the TE1, TE2, and TE4 variants achieving minimal values equal to 0. Finally, the proposed architecture demonstrates a comparable performance to the state-of-the-art that use CNNs.

Accelerating Malware Classification: A Vision Transformer Solution

Multi-variants vision transformer-based malware image classification model using multi-criteria decision-making

Enhanced Image-Based Malware Classification Using Transformer-Based Convolutional Neural Networks (CNNs)

A Convolutional Transformation Network for Malware Classification

Explainable Malware Detection System Using Transformers-Based Transfer Learning and Multi-Model Visual Representation

Malware-on-the-Brain: Illuminating Malware Byte Codes with Images for Malware Classification

A Lean Transformer Model for Dynamic Malware Analysis and Detection

Visualized Malware Multi-Classification Framework Using Fine-Tuned CNN-Based Transfer Learning Models

Digital Forensics for Malware Classification: An Approach for Binary Code to Pixel Vector Transition

A Deep Learning Model for Malware Multi-Class Classification based on Colored Malware Images

A Novel Image-Based Malware Classification Model Using Deep Learning

Deep Learning Fusion For Effective Malware Detection: Leveraging Visual Features

Deep hybrid approach with sequential feature extraction and classification for robust malware detection

Deep Feature Extraction and Classification of Android Malware Images

DeepImageDroid: A Hybrid Framework Leveraging Visual Transformers and Convolutional Neural Networks for Robust Android Malware Detection

Cyber-Threat Detection System Using a Hybrid Approach of Transfer Learning and Multi-Model Image Representation

A hybrid deep learning image-based analysis for effective malware detection

Dynamic data fusion using multi-input models for malware classification

ViT4Mal: Lightweight Vision Transformer for Malware Detection on Edge Devices

CyberSentinel: A Transparent Defense Framework for Malware Detection in High-Stakes Operational Environments

Intelligent malware classification based on network traffic and data augmentation techniques