Abstract:Edge computing is a feasible solution for effectively collecting and processing data in industrial Internet of Things (IIoT) systems, and edge security is an important guarantee for edge computing. Fast and accurate classification of malicious code in the whole lift cycle of edge computing is of great significance, which can effectively prevent malicious code from attacking wireless sensor networks and ensure the stable and secure transmission of data in smart devices. Considering that there is a large amount of code reuse in the same malicious code family, making their visual feature similar, many studies use visualization technology to assist malicious code classification. However, traditional malicious code visual classification schemes have the problems such as single image source, weak ability of deep-level feature extraction, and lack of attention to key image details. Therefore, an innovative malicious code visual classification method based on a deep residual network and hybrid attention mechanism for edge security is proposed in this study. Firstly, the malicious code visualization scheme integrates the bytecode file and assembly file of the malware and converts them into a four-channel RGBA image to fully represent malicious code feature information without increasing the computational complexity. Secondly, a hybrid attention mechanism is introduced into the deep residual network to construct an effective classification model, which extracts image texture features of malicious code from two dimensions of the channel and spatial to improve the classification performance. Finally, the experimental results on the BIG2015 and Malimg datasets show that the proposed scheme is feasible and effective and can be widely applied used in various malicious code classification issues, and the classification accuracy rate is relatively higher than the existing better-performing malicious code classification methods.

Research Strategy of Classify Malicious Code into Families on the Method of Deep Belief Net-works

Malicious Code Family Classification Method Based on Spatial Pyramid Pooling and Deep Residual Network

A malicious code family classification method based on self-attention mechanism

Application of Deep Belief Networks for opcode based malware detection

Malware Analysis Using Machine Learning and Deep Learning Techniques

Malware detection based on deep learning algorithm

Detection of Malicious Code Variants Based on Deep Learning

Malicious Code Classification Method Based on Deep Residual Network and Hybrid Attention Mechanism for Edge Security

Detecting Malware with an Ensemble Method Based on Deep Neural Network

A Hybrid Deep Learning Model for Malicious Behavior Detection

Image-Based Malware Classification Method with the AlexNet Convolutional Neural Network Model

Malicious Code Detection Based on CNNs and Multi-Objective Algorithm

CNN‐ and GAN‐based classification of malicious code families: A code visualization approach

A Malware Family Classification Method Based on the Point Cloud Model DGCNN

Improved Capsule Networks Based on Nash Equilibrium for Malicious Code Classification

An Efficient Malicious Code Detection System Based on Convolutional Neural Networks

Malicious Code Detection under 5G HetNets Based on a Multi-Objective RBM Model

Artificial neural network for decision of software maliciousness

Classification of Malicious Software Behaviour Detection with Hybrid Set Based Feed Forward Neural Network

Convolution neural network with batch normalization and inception-residual modules for Android malware classification

Malicious Code Detection Method Based on Static Features and Ensemble Learning