Abstract:With the rapid advancement of Internet technology, the threat of malware to computer systems and network security has intensified. Malware affects individual privacy and security and poses risks to critical infrastructures of enterprises and nations. The increasing quantity and complexity of malware, along with its concealment and diversity, challenge traditional detection techniques. Static detection methods struggle against variants and packed malware, while dynamic methods face high costs and risks that limit their application. Consequently, there is an urgent need for novel and efficient malware detection techniques to improve accuracy and robustness. This study first employs the minhash algorithm to convert binary files of malware into grayscale images, followed by the extraction of global and local texture features using GIST and LBP algorithms. Additionally, the study utilizes IDA Pro to decompile and extract opcode sequences, applying N-gram and tf-idf algorithms for feature vectorization. The fusion of these features enables the model to comprehensively capture the behavioral characteristics of malware. In terms of model construction, a CNN-BiLSTM fusion model is designed to simultaneously process image features and opcode sequences, enhancing classification performance. Experimental validation on multiple public datasets demonstrates that the proposed method significantly outperforms traditional detection techniques in terms of accuracy, recall, and F1 score, particularly in detecting variants and obfuscated malware with greater stability. The research presented in this paper offers new insights into the development of malware detection technologies, validating the effectiveness of feature and model fusion, and holds promising application prospects.

Method of Anti-Confusion Texture Feature Descriptor for Malware Images

Hybrid Malware Classification Method Using Segmentation-Based Fractal Texture Analysis and Deep Convolution Neural Network Features

A Comparative Performance Analysis of Malware Detection Algorithms Based on Various Texture Features and Classifiers

Malware Detection Using Frequency Domain-Based Image Visualization and Deep Learning

Image-Based Malware Classification Method with the AlexNet Convolutional Neural Network Model

Malware-on-the-Brain: Illuminating Malware Byte Codes with Images for Malware Classification

Malware Analysis Using Machine Learning and Deep Learning Techniques

PAFE: A lightweight visualization-based fast malware classification method

ATMPA: Attacking Machine Learning-based Malware Visualization Detection Methods via Adversarial Examples

Malware Classification Based on GAF Visualization of Dynamic API Call Sequences

Deep Learning Fusion For Effective Malware Detection: Leveraging Visual Features

Android Malware Detection Based on a Novel Mixed Bytecode Image Combined with Attention Mechanism

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion

A Convolutional Transformation Network for Malware Classification

Malware Classification Based on Image Segmentation

Deep Multi-Task Learning for Malware Image Classification

A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization

High-resolution Image-based Malware Classification using Multiple Instance Learning

A hybrid deep learning image-based analysis for effective malware detection

Deep Feature Extraction and Classification of Android Malware Images

Malicious Code Variant Identification Based on Multiscale Feature Fusion CNNs