Abstract:Malware remains a serious problem for corporations, government agencies, and individuals, as attackers continue to use it as a tool to effect frequent and costly network intrusions. Machine learning holds the promise of automating the work required to detect newly discovered malware families, and could potentially learn generalizations about malware and benign software that support the detection of entirely new, unknown malware families. Unfortunately, few proposed machine learning based malware detection methods have achieved the low false positive rates required to deliver deployable detectors. In this paper we a deep neural network malware classifier that achieves a usable detection rate at an extremely low false positive rate and scales to real world training example volumes on commodity hardware. Specifically, we show that our system achieves a 95% detection rate at 0.1% false positive rate (FPR), based on more than 400,000 software binaries sourced directly from our customers and internal malware databases. We achieve these results by directly learning on all binaries, without any filtering, unpacking, or manually separating binary files into categories. Further, we confirm our false positive rates directly on a live stream of files coming in from Invincea's deployed endpoint solution, provide an estimate of how many new binary files we expected to see a day on an enterprise network, and describe how that relates to the false positive rate and translates into an intuitive threat score. Our results demonstrate that it is now feasible to quickly train and deploy a low resource, highly accurate machine learning classification model, with false positive rates that approach traditional labor intensive signature based methods, while also detecting previously unseen malware.

Design and Implementation of Dual Malware Detection System

NIDS: Neural Network Based Intrusion Detection System

Design and Implementation of Network Worm Detection System for Internal Network

Design and Implementation of an Automated Malware Dynamic Analysis System

A malware detection framework based on kolmogorov complexity

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Malware detection system based on static and dynamic analysis and using machine learning

A multi-objective sequential three-way decision approach for real-time malware detection

A Malware Detection Method Based on Sandbox, Binary Instrumentation and Multidimensional Feature Extraction

Implementation of a Malware Detect Tool on Android

Design and Implementation of Malware Automated Analysis Tool Based on Behavior Analysis

Development of Windows Malware Detection System Based on Expert System

Design for Dual Network Defense System

Artificial Intelligence-Based Malware Detection, Analysis, and Mitigation

Deep Neural Network Based Malware Detection Using Two Dimensional Binary Program Features

An Efficient DenseNet-Based Deep Learning Model for Malware Detection

Advanced Cybersecurity Enhancement through Mathematical Models: A Comprehensive Approach Using Statistical Methods, Cryptographic Techniques, and Machine Learning Algorithms (SVM, Random Forest, and Neural Networks) for Behavior-Based Malware Detection

Malware traffic detection based on type II fuzzy recognition

An Efficient Malicious Code Detection System Based on Convolutional Neural Networks

Application of CLIPS Expert System to Malware Detection System

Evaluation of Machine Learning Algorithms for Malware Detection