scholarly journals A Semantic-Based Malware Detection System Design Based on Channels

Author(s):  
Peige Ren ◽  
Xiaofeng Wang ◽  
Chunqing Wu ◽  
Baokang Zhao ◽  
Hao Sun
Information ◽  
2021 ◽  
Vol 12 (3) ◽  
pp. 118
Author(s):  
Vassilios Moussas ◽  
Antonios Andreatos

Malware creators generate new malicious software samples by making minor changes in previously generated code, in order to reuse malicious code, as well as to go unnoticed from signature-based antivirus software. As a result, various families of variations of the same initial code exist today. Visualization of compiled executables for malware analysis has been proposed several years ago. Visualization can greatly assist malware classification and requires neither disassembly nor code execution. Moreover, new variations of known malware families are instantly detected, in contrast to traditional signature-based antivirus software. This paper addresses the problem of identifying variations of existing malware visualized as images. A new malware detection system based on a two-level Artificial Neural Network (ANN) is proposed. The classification is based on file and image features. The proposed system is tested on the ‘Malimg’ dataset consisting of the visual representation of well-known malware families. From this set some important image features are extracted. Based on these features, the ANN is trained. Then, this ANN is used to detect and classify other samples of the dataset. Malware families creating a confusion are classified by a second level of ANNs. The proposed two-level ANN method excels in simplicity, accuracy, and speed; it is easy to implement and fast to run, thus it can be applied to antivirus software, smart firewalls, web applications, etc.


Entropy ◽  
2021 ◽  
Vol 23 (3) ◽  
pp. 344
Author(s):  
Jeyaprakash Hemalatha ◽  
S. Abijah Roseline ◽  
Subbiah Geetha ◽  
Seifedine Kadry ◽  
Robertas Damaševičius

Recently, there has been a huge rise in malware growth, which creates a significant security threat to organizations and individuals. Despite the incessant efforts of cybersecurity research to defend against malware threats, malware developers discover new ways to evade these defense techniques. Traditional static and dynamic analysis methods are ineffective in identifying new malware and pose high overhead in terms of memory and time. Typical machine learning approaches that train a classifier based on handcrafted features are also not sufficiently potent against these evasive techniques and require more efforts due to feature-engineering. Recent malware detectors indicate performance degradation due to class imbalance in malware datasets. To resolve these challenges, this work adopts a visualization-based method, where malware binaries are depicted as two-dimensional images and classified by a deep learning model. We propose an efficient malware detection system based on deep learning. The system uses a reweighted class-balanced loss function in the final classification layer of the DenseNet model to achieve significant performance improvements in classifying malware by handling imbalanced data issues. Comprehensive experiments performed on four benchmark malware datasets show that the proposed approach can detect new malware samples with higher accuracy (98.23% for the Malimg dataset, 98.46% for the BIG 2015 dataset, 98.21% for the MaleVis dataset, and 89.48% for the unseen Malicia dataset) and reduced false-positive rates when compared with conventional malware mitigation techniques while maintaining low computational time. The proposed malware detection solution is also reliable and effective against obfuscation attacks.


2015 ◽  
Vol 13 (3) ◽  
pp. 850-855 ◽  
Author(s):  
L.J.G. Villalba ◽  
A.L.S. Orozco ◽  
J.M. Vidal

2018 ◽  
Vol 27 (6) ◽  
pp. 1206-1213 ◽  
Author(s):  
Jian Li ◽  
Zheng Wang ◽  
Tao Wang ◽  
Jinghao Tang ◽  
Yuguang Yang ◽  
...  

2021 ◽  
Vol 4 (1) ◽  
pp. 67-77
Author(s):  
Fransiska Sisilia Mukti ◽  
Lia Farokhah ◽  
Nur Lailatul Aqromi

Bus is one of public transportation and as the most preferable by Indonesian to support their mobility. The high number of bus traffics then demands the bus management to provide the maximum service for their passenger, in order to gain public trust. Unfortunately, in the reality passenger list’s fraud is often faced by the bus management, there is a mismatch list between the amount of deposits made by bus driver and the number of passengers carried by the bus, and as the result it caused big loss for the Bus management. Automatic Passenger Counting (APC) then as an artificial intelligence program that is considered to cope with the bus management problems. This research carried out an APC technology based on passenger face detection using the Viola-Jones method, which is integrated with an embedded system based on the Internet of Things in the processing and data transmission. To detect passenger images, a webcam is provided that is connected to the Raspberry pi which is then sent to the server via the Internet to be displayed on the website provided. The system database will be updated within a certain period of time, or according to the stop of the bus (the system can be adjusted according to management needs). The system will calculate the number of passengers automatically; the bus management can export passenger data whenever as they want. There are 3 main points in the architecture of modeling system, they are information system design, device architecture design, and face detection mechanism design to calculate the number of passengers. A system design test is carried out to assess the suitability of the system being built with company needs. Then, based on the questionnaire distributed to the respondent, averagely 85.12 % claim that the Face detection system is suitability. The score attained from 4 main aspects including interactivity, aesthetics, layout and personalization


Author(s):  
Balal Sohail Et. al.

Macro based Malware has taken a great rise is these recent years, Attackers are now using this malware for hacking purposes. This virus is embedded inside the macro of a word document and can be used to infect the victim’s machine. These infected files are usually sent through emails and all antivirus software are unable to detect the virus due to the format of the file. Due to the format being a rich text file and not an executable file, the infected file is able to bypass all security. Hence it is necessary to develop a detection system for such attacks to help reduce the threat. Technical research is carried out to identify the tools and techniques essential in the completion of this system. Research on methodology is done to finalise which development cycle will be used and how functions will be carried out at each phase of the development cycle. This paper outlines the problems that people face once they are attacked through macro malwares and the way it can be mitigated. Lastly, all information necessary to start the implementation has been gathered and analysed


Sign in / Sign up

Export Citation Format

Share Document