Abstract:Traditional malware detection systems based on signature-based detection methods cannot detect new and unseen malware. Moreover, conventional machine learning methods for malware detection have utilized features extracted through static program analysis or dynamic analysis, which requires code debugging and execution primarily through offline processing; hence not a scalable approach. This paper proposes a novel intelligent malware classification using a deep convolution neural network (IMCNN) in organizational networks enabled with Honeypots. Systematic customization of pre-trained convolutional neural networks(CNN) as a transfer learning and ensemble learning as a classification is presented to detect intelligent modern-day malware. Real-world malware samples are systematically labeled and visualized into grayscale images. Four cutting-edge deep CNN models - VGG16, VGG19, InceptionV3, and ResNet50, are trained on the ImageNet database ( ≥ 1 million) and fine-tuned as feature extractors along with a basic CNN model. Three strategies are designed for feature extraction and selection: Rectified linear unit (ReLU) fully connected layer embedded in a deep CNN model, principal component analysis (PCA), and singular value decomposition(SVD). Reduced sets of features are stacked and used to train k-nearest neighbor (k-NN), support vector machine (SVM), and random forest (RF) classifiers for predictions. Subsequently, the predictive probabilities of different machine-learned models are ensembled using a soft voting method for final classification. The proposed method is evaluated on MalImg datasets (9339 malware samples of 25 families) and real-world modern malware datasets (690 malware of 22 families). The experimental results reveal that despite using a reduced feature set, the IMCNN effectively detects malware with 99.36% test accuracy on unseen data for MalImg datasets and 92.11% for real-world malware. In addition, the proposed method is compared with several existing state-of-art malware detection models in terms of performance accuracy and found performing as the best. Experiments demonstrated that the proposed method is resilient to polymorphic code obfuscation used by the malware authors.

Image-Based Malware Classification Using Ensemble of CNN Architectures (IMCEC)

IMCFN: Image-based Malware Classification Using Fine-Tuned Convolutional Neural Network Architecture.

IMCNN:Intelligent Malware Classification using Deep Convolution Neural Networks as Transfer learning and ensemble learning in honeypot enabled organizational network

Image-Based Malware Classification Method with the AlexNet Convolutional Neural Network Model

IMCMK-CNN: A Lightweight Convolutional Neural Network with Multi-scale Kernels for Image-based Malware Classification

S-DCNN: stacked deep convolutional neural networks for malware classification

Image-Based Malware Classification Using QR and Aztec Codes

Data augmentation based malware detection using convolutional neural networks

Classifying Malware Images with Convolutional Neural Network Models

Enhanced Image-Based Malware Classification Using Transformer-Based Convolutional Neural Networks (CNNs)

An ensemble approach for imbalanced multiclass malware classification using 1D-CNN

Malware Classification with Improved Convolutional Neural Network Model

IoT Malware Detection Architecture using a Novel Channel Boosted and Squeezed CNN

CSMC: A Secure and Efficient Visualized Malware Classification Method Inspired by Compressed Sensing

Visualized Malware Multi-Classification Framework Using Fine-Tuned CNN-Based Transfer Learning Models

Image-Based Malware Classification Using VGG19 Network and Spatial Convolutional Attention

Deep Learning for Cybersecurity Classification: Utilizing Depth-Wise CNN and Attention Mechanism on VM-Obfuscated Data

Dual Convolutional Malware Network (DCMN): An Image-Based Malware Classification Using Dual Convolutional Neural Networks

New Approach to Malware Detection Using Optimized Convolutional Neural Network

An Efficient DenseNet-Based Deep Learning Model for Malware Detection

Malware Detection with Malware Images Using Deep Learning Techniques