Abstract:With the rapid advancement of Internet technology, the threat of malware to computer systems and network security has intensified. Malware affects individual privacy and security and poses risks to critical infrastructures of enterprises and nations. The increasing quantity and complexity of malware, along with its concealment and diversity, challenge traditional detection techniques. Static detection methods struggle against variants and packed malware, while dynamic methods face high costs and risks that limit their application. Consequently, there is an urgent need for novel and efficient malware detection techniques to improve accuracy and robustness. This study first employs the minhash algorithm to convert binary files of malware into grayscale images, followed by the extraction of global and local texture features using GIST and LBP algorithms. Additionally, the study utilizes IDA Pro to decompile and extract opcode sequences, applying N-gram and tf-idf algorithms for feature vectorization. The fusion of these features enables the model to comprehensively capture the behavioral characteristics of malware. In terms of model construction, a CNN-BiLSTM fusion model is designed to simultaneously process image features and opcode sequences, enhancing classification performance. Experimental validation on multiple public datasets demonstrates that the proposed method significantly outperforms traditional detection techniques in terms of accuracy, recall, and F1 score, particularly in detecting variants and obfuscated malware with greater stability. The research presented in this paper offers new insights into the development of malware detection technologies, validating the effectiveness of feature and model fusion, and holds promising application prospects.

Malicious Webpages Analysis and Detection Algorithm Based on BiLSTM

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

Feature fusion-based malicious code detection with dual attention mechanism and BiLSTM

Malicious URL Detection Based on Improved Multilayer Recurrent Convolutional Neural Network Model

Research on phishing webpage detection technology based on CNN-BiLSTM algorithm

Detecting Malicious Web Requests Using an Enhanced TextCNN.

An Android Malware Detection Method Using Deep Learning Based on API Calls

A Hybrid Deep Learning Model for Malicious Behavior Detection

Malware Analysis Using Machine Learning and Deep Learning Techniques

WCA: Integration of Natural Language Processing Methods and Machine Learning Model for Effective Analysis of Web Content to Classify Malicious Webpages

Detection of Malicious Code Variants Based on Deep Learning

A Comparative Evaluation of Ensemble Classifiers for Malicious Webpage Detection

An Assessment of Lexical, Network, and Content-Based Features for Detecting Malicious URLs Using Machine Learning and Deep Learning Models

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion

A Malicious Domain Detection Model Based on Improved Deep Learning

Malware classification algorithm using advanced Word2vec-based Bi-LSTM for ground control stations

Malicious URL Detection via Pretrained Language Model Guided Multi-Level Feature Attention Network

Hybrid Deep Learning Approach Based on LSTM and CNN for Malware Detection

Malware Detection with LSTM using Opcode Language

Detection of Malicious Websites Using Machine Learning Techniques

Advancing Malicious Website Identification: A Machine Learning Approach Using Granular Feature Analysis