Abstract:Malware is one of the most significant threats in today’s computing world since the number of websites distributing malware is increasing at a rapid rate. Malware analysis and prevention methods are increasingly becoming necessary for computer systems connected to the Internet. This software exploits the system’s vulnerabilities to steal valuable information without the user’s knowledge, and stealthily send it to remote servers controlled by attackers. Traditionally, anti-malware products use signatures for detecting known malware. However, the signature-based method does not scale in detecting obfuscated and packed malware. Considering that the cause of a problem is often best understood by studying the structural aspects of a program like the mnemonics, instruction opcode, API Call, etc. In this paper, we investigate the relevance of the features of unpacked malicious and benign executables like mnemonics, instruction opcodes, and API to identify a feature that classifies the executable. Prominent features are extracted using Minimum Redundancy and Maximum Relevance (mRMR) and Analysis of Variance (ANOVA). Experiments were conducted on four datasets using machine learning and deep learning approaches such as Support Vector Machine (SVM), Naïve Bayes, J48, Random Forest (RF), and XGBoost. In addition, we also evaluate the performance of the collection of deep neural networks like Deep Dense network, One-Dimensional Convolutional Neural Network (1D-CNN), and CNN-LSTM in classifying unknown samples, and we observed promising results using APIs and system calls. On combining APIs/system calls with static features, a marginal performance improvement was attained comparing models trained only on dynamic features. Moreover, to improve accuracy, we implemented our solution using distinct deep learning methods and demonstrated a fine-tuned deep neural network that resulted in an F1-score of 99.1% and 98.48% on Dataset-2 and Dataset-3, respectively.

Distributed Malware Detection Based on Binary File Features in Cloud Computing Environment

Malware Analysis Using Machine Learning and Deep Learning Techniques

Malware Detection Using CNN Via Word Embedding in Cloud Computing Infrastructure

Malware Detection Using Machine Learning Based on the Combination of Dynamic and Static Features

A Novel Malware Detection Mechanism based on Features Extracted from Converted Malware Binary Images

Using Deep-Learning-Based Memory Analysis for Malware Detection in Cloud.

A malware detection framework based on kolmogorov complexity

A Study on the Application of Distributed System Technology-Guided Machine Learning in Malware Detection

MDCHD: A Novel Malware Detection Method in Cloud Using Hardware Trace and Deep Learning.

MDCD: A malware detection approach in cloud using deep learning

Machine Learning based Malware Detection in Cloud Environment using Clustering Approach

Deep Neural Network Based Malware Detection Using Two Dimensional Binary Program Features

Malware Detection Based on Multi-level and Dynamic Multi-feature Using Ensemble Learning at Hypervisor

A Review of Deep Learning Based Malware Detection Techniques

Research on Malware Software Detection Technology Based on SVM on Cloud Platform for Mobile Terminal

Detection of Malicious Software by Analyzing Distinct Artifacts Using Machine Learning and Deep Learning Algorithms

Android Malware Detection Using Local Binary Pattern and Principal Component Analysis.

A hybrid deep learning image-based analysis for effective malware detection

A Novel Malware Detection System Based On Machine Learning and Binary Visualization

Machine-Learning-Based Malware Detection for Virtual Machine by Analyzing Opcode Sequence

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion