Abstract:Malware attacks have escalated significantly with an increase in the number of internet users and connected devices. With the increasingly different types of malware released by hackers, designing new and competitive techniques to detect advanced malware is essential. In the proposed research, we have developed a multi-level feature extraction technique using deep learning architectures and a classification model to classify malware families. The essential features from the malware images are extracted using the Gated Recurrent Unit in the first step, which are further fed to a Convolutional Neural Network model for extracting the final feature vector. The multi-level feature selection is followed by classification into various malware families using Cost-sensitive Boot Strapped Weighted Random Forest (CSBW-RF). The proposed approach gave promising results of 99.58 % accuracy in distinguishing the 25 different malware families on the Mallmg dataset. This hybrid model gave significantly better performance scores for classifying visually similar malware families. The generalizability of the proposed model is benchmarked with the popular Microsoft Big 2015 dataset and has achieved comparatively higher performance scores than many existing models. This benchmarking demonstrates the robustness and scalability of our approach. The use of cost-sensitive learning and bootstrapping techniques also contributed to the model's ability to generalize well to new and unseen data. These enhancements ensure that our model can be effectively applied in diverse real-world scenarios, maintaining high performance across different environments and malware types. This research can contribute to detecting malware attacks and can be integrated in threat monitoring systems. The successful application of this hybrid model indicates its potential for deployment in real-world cybersecurity environments, providing a strong defense against evolving malware threats.

A Malware Detection Method Based on Sandbox, Binary Instrumentation and Multidimensional Feature Extraction

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Detection of Android Malware Based on Deep Forest and Feature Enhancement

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion

A malware detection framework based on kolmogorov complexity

A Novel Malware Detection Mechanism based on Features Extracted from Converted Malware Binary Images

Malware Detection Based on Multi-level and Dynamic Multi-feature Using Ensemble Learning at Hypervisor

A malware detection scheme based on mining format information

A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization

An unknown malware detection scheme based on the features of graph

Behavior-Based Malware Analysis and Detection

A Hybrid Deep Network Framework for Android Malware Detection

Deep hybrid approach with sequential feature extraction and classification for robust malware detection

HGDetector: A Hybrid Android Malware Detection Method Using Network Traffic and Function Call Graph

A Review of Deep Learning Based Malware Detection Techniques

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

Enhancing Malware Classification Through Dynamic Behavioral Analysis, SIEM Integration, and Deep Learning

Discovering Malicious Signatures in Software from Structural Interactions

Malware detection system based on static and dynamic analysis and using machine learning

SUNDEW: An Ensemble of Predictors for Case-Sensitive Detection of Malware