Abstract:In this era, where the volume and diversity of malware is rising exponentially, new techniques need to be employed for faster and accurate identification of the malwares. Manual heuristic inspection of malware analysis are neither effective in detecting new malware, nor efficient as they fail to keep up with the high spreading rate of malware. Machine learning approaches have therefore gained momentum. They have been used to automate static and dynamic analysis investigation where malware having similar behavior are clustered together, and based on the proximity unknown malwares get classified to their respective families. Although many such research efforts have been conducted where data-mining and machine-learning techniques have been applied, in this paper we show how the accuracy can further be improved using deep learning networks. As deep learning offers superior classification by constructing neural networks with a higher number of potentially diverse layers it leads to improvement in automatic detection and classification of the malware variants.In this research, we present a framework which extracts various feature-sets such as system calls, operational codes, sections, and byte codes from the malware files. In the experimental and result section, we compare the accuracy obtained from each of these features and demonstrate that feature vector for system calls yields the highest accuracy. The paper concludes by showing how deep learning approach performs better than the traditional shallow machine learning approaches.

Host Based Unknown WOrm Detection Using Machine Learning

Detection Method of Computer Worms Based on SVM

Research and Development of Worm Detection Technologies

Cooperation System of Worm Detection and Quarantine in Real Time

Detecting Randomly Scanning Worms Based on Heavy-Tailed Property

Worm Intrusion Alarm Modeling Based on Network Traffic Character

A novel anomaly detection algorithm and prewarning technology of unknown worms

Network Worms Detecting System Based on Failed Connections Analysis

A worm detection method based on multi-feature likeness

A Novel Anomaly Detection Method for Worms

A Worm Early Detection System Based on Multi-Similarity

Large Scale Network Worm Detection Using Automatic Signature Extraction

A worm behavioral approach to susceptible host detection

Adaptive method for monitoring network and early detection of internet worms

Fast Detection of Worm Infection for Large-Scale Networks

A New Approach to Automatically Detect Worms

Malware Analysis Using Machine Learning and Deep Learning Techniques

Early Warning of Active Worms Based on Multi-Similarity

Worm Detection and Signature Extraction Based on Communication Characteristics

Behavior-based Virus Detection Method Using Multi-Class Support Vector Machine

Research on Immune Recognition Model and Algorithm for Unknown Viruses Detection