Towards time evolved malware identification using two-head neural network

Chong Yuan, Jingxuan Cai, Donghai Tian*, Rui Ma, Xiaoqi Jia, Wenmao Liu

*此作品的通讯作者

科研成果: 期刊稿件文章同行评审

10 引用 (Scopus)

摘要

Deep learning-based malware detection plays an important role in cybersecurity in recent years. However, with the increasing complexity of malware and the continuous development of anti-detection techniques, a lot of malicious programs evolve over time. As a result, the deep learning-based methods may fail to recognize these time evolved malware samples, which poses a critical challenge to deploy the deep learning models in practice. In this paper, we first implement two well-known deep learning-based malware detection models: MalConv and TextCNN. From our experiments that divide the dataset according to the timestamp information for model training and testing, we found the detection performance of the two models both decline obviously when they process the time evolved malware. To address this problem, we propose an anomaly detection approach based on two-head neural network. This method can identify the time evolved samples. These samples would make the previous trained deep learning models misclassified. The experiments show that the malware detection accuracies can be improved by 8.62% for MalConv and 13.12% for TextCNN after the identified samples are filtered. This indicates that our method could effectively improve the usability of the pre-trained models on processing the new data. Moreover, the experimental results are well studied.

源语言英语
文章编号103098
期刊Journal of Information Security and Applications
65
DOI
出版状态已出版 - 3月 2022

指纹

探究 'Towards time evolved malware identification using two-head neural network' 的科研主题。它们共同构成独一无二的指纹。

引用此