Affiliation:
1. School of Computing, Gachon University, Seongnam-si 13120, Republic of Korea
Abstract
Malware classification is a crucial step in defending against potential malware attacks. Despite the significance of a robust malware classifier, existing approaches reveal notable limitations in achieving high performance in malware classification. This study focuses on image-based malware detection, where malware binaries are transformed into visual representations to leverage image classification techniques. We propose a two-branch deep network designed to capture salient features from these malware images. The proposed network integrates faster asymmetric spatial attention to refine the extracted features of its backbone. Additionally, it incorporates an auxiliary feature branch to learn missing information about malware images. The feasibility of the proposed method has been thoroughly examined and compared with state-of-the-art deep learning-based classification methods. The experimental results demonstrate that the proposed method can surpass its counterparts across various evaluation metrics.
Funder
National Research Foundation of Korea
Reference34 articles.
1. Malware classification and composition analysis: A survey of recent developments;Abusitta;J. Inf. Secur. Appl.,2021
2. Fusing feature engineering and deep learning: Case study of malware classification;Gibert;Expert Syst. Appl.,2022
3. Ahmadi, M., Ulyanov, D., Semenov, S., Trofimov, M., and Giacinto, G. (2016, January 9–11). Novel feature extraction, selection, and fusion for effective malware-family classification. Proceedings of the Sixth ACM Conference on Data and Application Security and Privacy, New Orleans, LA, USA.
4. Anderson, B., Storlie, C., and Lane, T. (2012, January 19). Improving malware classification: Bridging the static–dynamic gap. Proceedings of the 5th ACM Workshop on Security and Artificial Intelligence, Raleigh, NC, USA.
5. New malware classification framework based on deep learning algorithms;Aslan;IEEE Access,2021