Abstract:The tremendous growth in online activity and the Internet of Things (IoT) led to an increase in cyberattacks. Malware infiltrated at least one device in almost every household. Various malware detection methods that use shallow or deep IoT techniques were discovered in recent years. Deep learning models with a visualization method are the most commonly and popularly used strategy in most works. This method has the benefit of automatically extracting features, requiring less technical expertise, and using fewer resources during data processing. Training deep learning models that generalize effectively without overfitting is not feasible or appropriate with large datasets and complex architectures. In this paper, a novel ensemble model, Stacked Ensemble-autoencoder, GRU, and MLP or SE-AGM, composed of three light-weight neural network models-autoencoder, GRU, and MLP-that is trained on the 25 essential and encoded extracted features of the benchmark MalImg dataset for classification was proposed. The GRU model was tested for its suitability in malware detection due to its lesser usage in this domain. The proposed model used a concise set of malware features for training and classifying the malware classes, which reduced the time and resource consumption in comparison to other existing models. The novelty lies in the stacked ensemble method where the output of one intermediate model works as input for the next model, thereby refining the features as compared to the general notion of an ensemble approach. Inspiration was drawn from earlier image-based malware detection works and transfer learning ideas. To extract features from the MalImg dataset, a CNN-based transfer learning model that was trained from scratch on domain data was used. Data augmentation was an important step in the image processing stage to investigate its effect on classifying grayscale malware images in the MalImg dataset. SE-AGM outperformed existing approaches on the benchmark MalImg dataset with an average accuracy of 99.43%, demonstrating that our method was on par with or even surpassed them.

CNN-Based Malware Variants Detection Method for Internet of Things

IoT Malware Classification Based on Lightweight Convolutional Neural Networks

Lightweight Classification of IoT Malware based on Image Recognition

Explainable Artificial Intelligence-Based IoT Device Malware Detection Mechanism Using Image Visualization and Fine-Tuned CNN-Based Transfer Learning Model

Malware Detection in IOT Systems Using Machine Learning Techniques

A Malicious Code Detection Method Based on FF-MICNN in the Internet of Things

Performance Evaluation of Deep Learning Techniques in The Detection of IOT Malware

Malware Squid: A Novel IoT Malware Traffic Analysis Framework using Convolutional Neural Network and Binary Visualisation

Detection of Malicious Code Variants Based on Deep Learning

Transfer Learning for Image-Based Malware Detection for IoT

Efficient Detection and Classification of Internet-of-Things Malware Based on Byte Sequences from Executable Files

A Novel Detection and Multi-Classification Approach for IoT-Malware Using Random Forest Voting of Fine-Tuning Convolutional Neural Networks

Malware Detection in Internet of Things (IoT) Devices Using Deep Learning

Lightweight IoT Malware Detection Solution Using CNN Classification

Artificial intelligence-driven malware detection framework for internet of things environment

Optimized and Efficient Image-Based IoT Malware Detection Method

Malware Detection for Internet of Things Using One-Class Classification

IoT Malware Detection Architecture using a Novel Channel Boosted and Squeezed CNN

Deep Neural Networks for Enhanced Security: Detecting Metamorphic Malware in IoT Devices

Image-Based Malware Classification Method with the AlexNet Convolutional Neural Network Model

Intelligent botnet detection in IoT networks using parallel CNN‐LSTM fusion