Abstract:With the rapid advancement of Internet technology, the threat of malware to computer systems and network security has intensified. Malware affects individual privacy and security and poses risks to critical infrastructures of enterprises and nations. The increasing quantity and complexity of malware, along with its concealment and diversity, challenge traditional detection techniques. Static detection methods struggle against variants and packed malware, while dynamic methods face high costs and risks that limit their application. Consequently, there is an urgent need for novel and efficient malware detection techniques to improve accuracy and robustness. This study first employs the minhash algorithm to convert binary files of malware into grayscale images, followed by the extraction of global and local texture features using GIST and LBP algorithms. Additionally, the study utilizes IDA Pro to decompile and extract opcode sequences, applying N-gram and tf-idf algorithms for feature vectorization. The fusion of these features enables the model to comprehensively capture the behavioral characteristics of malware. In terms of model construction, a CNN-BiLSTM fusion model is designed to simultaneously process image features and opcode sequences, enhancing classification performance. Experimental validation on multiple public datasets demonstrates that the proposed method significantly outperforms traditional detection techniques in terms of accuracy, recall, and F1 score, particularly in detecting variants and obfuscated malware with greater stability. The research presented in this paper offers new insights into the development of malware detection technologies, validating the effectiveness of feature and model fusion, and holds promising application prospects.

Malware Detection Using Contrastive Learning Based on Multi-Feature Fusion

Malware Variants Detection Based on Feature Fusion

Multi-feature Fusion Malware Detection Method Based on Attention and Gating Mechanisms

Malicious Code Variant Identification Based on Multiscale Feature Fusion CNNs

Meta-HFMD: A Hierarchical Feature Fusion Malware Detection Framework Via Multi-task Meta-learning

Multi-context Features for Detecting Malicious Programs

Deep Learning Fusion For Effective Malware Detection: Leveraging Visual Features

A Hybrid Attention Network for Malware Detection Based on Multi-Feature Aligned and Fusion

Feature fusion-based malicious code detection with dual attention mechanism and BiLSTM

Feature graph construction with static features for malware detection

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion

MalFCS: An effective malware classification framework with automated feature extraction based on deep convolutional neural networks

A New Learning Approach to Malware Classification Using Discriminative Feature Extraction.

SMASH: A Malware Detection Method Based on Multi-Feature Ensemble Learning

A Malware Detection Algorithm Based on Multi-View Fusion

Malware Detection with Limited Supervised Information Via Contrastive Learning on API Call Sequences

Malware Detection Using Machine Learning Based on the Combination of Dynamic and Static Features

An Android Malware Detection System Based on Feature Fusion

Analytical method of high-dimensional feature fusion for malware classification

A Deep Feature Fusion Method for Android Malware Detection

Fine-grained Classification of Malicious Code Based on CNN and Multi-resolution Feature Fusion