Malware Detection Using Frequency Domain-Based Image Visualization and Deep Learning

dc.contributor.authorMohammed, Tajuddin Manhar
dc.contributor.authorNataraj, Lakshmanan
dc.contributor.authorChikkagoudar, Satish
dc.contributor.authorChandrasekaran, Shivkumar
dc.contributor.authorManjunath, B.S.
dc.date.accessioned2020-12-24T20:29:18Z
dc.date.available2020-12-24T20:29:18Z
dc.date.issued2021-01-05
dc.description.abstractWe propose a novel method to detect and visualize malware through image classification. The executable binaries are represented as grayscale images obtained from the count of N-grams (N=2) of bytes in the Discrete Cosine Transform (DCT) domain and a neural network is trained for malware detection. A shallow neural network is trained for classification, and its accuracy is compared with deep-network architectures such as ResNet that are trained using transfer learning. Neither dis-assembly nor behavioral analysis of malware is required for these methods. Motivated by the visual similarity of these images for different malware families, we compare our deep neural network models with standard image features like GIST descriptors to evaluate the performance. A joint feature measure is proposed to combine different features using error analysis to get an accurate ensemble model for improved classification performance. A new dataset called MaleX which contains around 1 million malware and benign Windows executable samples is created for large-scale malware detection and classification experiments. Experimental results are quite promising with 96% binary classification accuracy on MaleX. The proposed model is also able to generalize well on larger unseen malware samples and the results compare favorably with state-of-the-art static analysis-based malware detection algorithms.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2021.858
dc.identifier.isbn978-0-9981331-4-0
dc.identifier.urihttp://hdl.handle.net/10125/71479
dc.language.isoEnglish
dc.relation.ispartofProceedings of the 54th Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectMachine Learning and Cyber Threat Intelligence and Analytics
dc.subjectdeep learning
dc.subjectfrequency analysis
dc.subjectimage visualization
dc.subjectmachine learning
dc.subjectmalware detection
dc.titleMalware Detection Using Frequency Domain-Based Image Visualization and Deep Learning
prism.startingpage7132

Files

Original bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
0697.pdf
Size:
1022.86 KB
Format:
Adobe Portable Document Format