Abstract:With the rapid advancement of Internet technology, the threat of malware to computer systems and network security has intensified. Malware affects individual privacy and security and poses risks to critical infrastructures of enterprises and nations. The increasing quantity and complexity of malware, along with its concealment and diversity, challenge traditional detection techniques. Static detection methods struggle against variants and packed malware, while dynamic methods face high costs and risks that limit their application. Consequently, there is an urgent need for novel and efficient malware detection techniques to improve accuracy and robustness. This study first employs the minhash algorithm to convert binary files of malware into grayscale images, followed by the extraction of global and local texture features using GIST and LBP algorithms. Additionally, the study utilizes IDA Pro to decompile and extract opcode sequences, applying N-gram and tf-idf algorithms for feature vectorization. The fusion of these features enables the model to comprehensively capture the behavioral characteristics of malware. In terms of model construction, a CNN-BiLSTM fusion model is designed to simultaneously process image features and opcode sequences, enhancing classification performance. Experimental validation on multiple public datasets demonstrates that the proposed method significantly outperforms traditional detection techniques in terms of accuracy, recall, and F1 score, particularly in detecting variants and obfuscated malware with greater stability. The research presented in this paper offers new insights into the development of malware detection technologies, validating the effectiveness of feature and model fusion, and holds promising application prospects.

A Novel Anti-Obfuscation Model for Detecting Malicious Code

A FEATURE SELECTION AND MODELLING METHOD FOR MALICIOUS CODE

Method for Detecting the Obfuscated Malicious Code Based on Behavior Connection

Malicious Code Detection Based on Software Fingerprint

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion

Malicious Code Detection Method Based on Static Features and Ensemble Learning

K-Means Clustering Analysis Based On Adaptive Weights For Malicious Code Detection

An ensemble framework for interpretable malicious code detection

Detecting Malicious JavaScript Code Based on Semantic Analysis.

Feature Representation and Selection in Malicious Code Detection Methods Based on Static System Calls

An Empirical Study on the Effects of Obfuscation on Static Machine Learning-Based Malicious JavaScript Detectors

A malware detection framework based on kolmogorov complexity

Malicious Code Detection Using LLM

A deep learning approach for detecting malicious JavaScript code

Obfuscated Malicious Javascript Detection by Machine Learning

Obfuscation-Resilient Android Malware Analysis Based on Complementary Features

Adversarial ELF Malware Detection Method Using Model Interpretation

Detecting new obfuscated malware variants: A lightweight and interpretable machine learning approach

An Efficient Malicious Code Detection System Based on Convolutional Neural Networks

Impact of Code Deobfuscation and Feature Interaction in Android Malware Detection

Learning-Based Detection for Malicious Android Application Using Code Vectorization