Abstract:Malware attacks have escalated significantly with an increase in the number of internet users and connected devices. With the increasingly different types of malware released by hackers, designing new and competitive techniques to detect advanced malware is essential. In the proposed research, we have developed a multi-level feature extraction technique using deep learning architectures and a classification model to classify malware families. The essential features from the malware images are extracted using the Gated Recurrent Unit in the first step, which are further fed to a Convolutional Neural Network model for extracting the final feature vector. The multi-level feature selection is followed by classification into various malware families using Cost-sensitive Boot Strapped Weighted Random Forest (CSBW-RF). The proposed approach gave promising results of 99.58 % accuracy in distinguishing the 25 different malware families on the Mallmg dataset. This hybrid model gave significantly better performance scores for classifying visually similar malware families. The generalizability of the proposed model is benchmarked with the popular Microsoft Big 2015 dataset and has achieved comparatively higher performance scores than many existing models. This benchmarking demonstrates the robustness and scalability of our approach. The use of cost-sensitive learning and bootstrapping techniques also contributed to the model's ability to generalize well to new and unseen data. These enhancements ensure that our model can be effectively applied in diverse real-world scenarios, maintaining high performance across different environments and malware types. This research can contribute to detecting malware attacks and can be integrated in threat monitoring systems. The successful application of this hybrid model indicates its potential for deployment in real-world cybersecurity environments, providing a strong defense against evolving malware threats.

Malware classification based on double byte feature encoding

Malware Analysis Using Machine Learning and Deep Learning Techniques

Malware Classification with Word Embedding Features

Large-Scale Malicious Software Classification With Fuzzified Features and Boosted Fuzzy Random Forest

Dynamic data fusion using multi-input models for malware classification

Android Malware Detection Based on a Novel Mixed Bytecode Image Combined with Attention Mechanism

Hybrid Malware Classification Method Using Segmentation-Based Fractal Texture Analysis and Deep Convolution Neural Network Features

Malware Classification using Deep Learning based Feature Extraction and Wrapper based Feature Selection Technique

Deep hybrid approach with sequential feature extraction and classification for robust malware detection

Digital Forensics for Malware Classification: An Approach for Binary Code to Pixel Vector Transition

Integration of Static and Dynamic Analysis for Malware Family Classification with Composite Neural Network

Image-Based Malware Classification Method with the AlexNet Convolutional Neural Network Model

Detection of Advanced Malware by Machine Learning Techniques

Malware classification algorithm using advanced Word2vec-based Bi-LSTM for ground control stations

Malware Classification Based on GAF Visualization of Dynamic API Call Sequences

Malware Detection using Machine Learning and Deep Learning

A Natural Language Processing Approach to Malware Classification

Opcode Sequence Analysis of Android Malware by a Convolutional Neural Network.

Classifying Malware Represented As Control Flow Graphs Using Deep Graph Convolutional Neural Network

An effective approach for classification of advanced malware with high accuracy

Fusion of deep learning based cyberattack detection and classification model for intelligent systems