Abstract:Edge computing is a feasible solution for effectively collecting and processing data in industrial Internet of Things (IIoT) systems, and edge security is an important guarantee for edge computing. Fast and accurate classification of malicious code in the whole lift cycle of edge computing is of great significance, which can effectively prevent malicious code from attacking wireless sensor networks and ensure the stable and secure transmission of data in smart devices. Considering that there is a large amount of code reuse in the same malicious code family, making their visual feature similar, many studies use visualization technology to assist malicious code classification. However, traditional malicious code visual classification schemes have the problems such as single image source, weak ability of deep-level feature extraction, and lack of attention to key image details. Therefore, an innovative malicious code visual classification method based on a deep residual network and hybrid attention mechanism for edge security is proposed in this study. Firstly, the malicious code visualization scheme integrates the bytecode file and assembly file of the malware and converts them into a four-channel RGBA image to fully represent malicious code feature information without increasing the computational complexity. Secondly, a hybrid attention mechanism is introduced into the deep residual network to construct an effective classification model, which extracts image texture features of malicious code from two dimensions of the channel and spatial to improve the classification performance. Finally, the experimental results on the BIG2015 and Malimg datasets show that the proposed scheme is feasible and effective and can be widely applied used in various malicious code classification issues, and the classification accuracy rate is relatively higher than the existing better-performing malicious code classification methods.

JStrong: Malicious JavaScript detection based on code semantic representation and graph neural network

JStill: mostly static detection of obfuscated malicious JavaScript code

A deep learning approach for detecting malicious JavaScript code

JACLNet:Application of adaptive code length network in JavaScript malicious code detection

Malicious JavaScript Code Detection Based on Hybrid Analysis

JSContana: Malicious JavaScript detection using adaptable context analysis and key feature extraction

Understanding the Influence of AST-JS for Improving Malicious Webpage Detection

Detecting Malicious Accounts in Online Developer Communities Using Deep Learning

Automated Static Warning Identification via Path-based Semantic Representation

MalGraph: Hierarchical Graph Neural Networks for Robust Windows Malware Detection

BejaGNN: behavior-based Java malware detection via graph neural network

Discovering Malicious Signatures in Software from Structural Interactions

Malicious Code Detection Method Based on Static Features and Ensemble Learning

An Efficient Malicious Code Detection System Based on Convolutional Neural Networks

Detection of Malicious Code Variants Based on Deep Learning

An ensemble framework for interpretable malicious code detection

SCORE: Syntactic Code Representations for Static Script Malware Detection

A Deep Learning Approach to Fast, Format-Agnostic Detection of Malicious Web Content

An efficient malicious webpage static detection framework based on optimized Bayesian and hybrid machine learning

Classifying Malware Represented As Control Flow Graphs Using Deep Graph Convolutional Neural Network

Malicious Code Classification Method Based on Deep Residual Network and Hybrid Attention Mechanism for Edge Security