Malware detection have long become a challenge in research. The existing methods rely on malware signature which are proved not to be effective nowadays. The recent researches focus on using probabilistic model such as machine learning to detect the existence of malware. They, however, do not achieve such a good performance. Particularly, machine learning techniques still have an issue of high feature engineering overhead. In this paper, we propose a deep learning method to detect malware based on their malicious behavior. Through experimentation, we show that our method can achieve a very high accuracy rate of 98.75 in F1 measure, compared to state of the art methods.
AndersonB., QuistD., NeilJ., StorlieC. and LaneT., Graphbased malware detection using dynamic analysis, Journal in computer Virology, 7(4) (2011), 247–258.
3.
AndersonB., StorlieC. and LaneT., Improving malware classification: Bridging the static/dynamic gap, in Proceedings of the 5th ACM Workshop on Security and Artificial Intelligence ACM, 2012, pp. 3–14.
4.
BaileyM., OberheideJ., AndersenJ., MaoZ.M., JahanianF., NazarioJ.Automated classification and analysis of internet malware, in RAID, vol. 4637. Springer, 2007, pp. 178–197.
5.
BayerU., ComparettiP.M., HlauschekC., KruegelC. and KirdaE., Scalable, beavihor-based malware clustering, in NDSS, vol. 9, 2009, pp. 8–11.
6.
FirdausiI., ErwinA., NugrohoA.S.Analysis of machine learning techniques used in beavihor-based malware detection, in Advances in Computing, Control and Telecommunication Technologies (ACT), 2010 Second International Conference on IEEE, 2010, pp. 201–203.
7.
KolterJ.Z. and MaloofM.A., Learning to detect malicious executables in the wild, in Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining ACM, 2004, pp. 470–478.
8.
KongD. and YanG., Discriminant malware distance learning on structural information for automated malware classification, in Proceedings of the 19th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining ACM, 2013, pp. 1357–1365.
9.
LeeT. and ModyJ., Beavihoral classification, in 15th European Institute for Computer Antivirus Research (EICAR 2006) Annual Conference, 2006.
10.
NariS. and GhorbaniA.A., Automated malware classification based on network beavihor, in Computing, Networking and Communications (ICNC), 2013 International Conference on IEEE, 2013 pp. 642–647.
11.
ParkY., ReevesD., MulukutlaV. and SundaravelB., Fast malware classification by automated beavihoral graph matching, in Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research ACM, 2010, p. 45.
12.
RieckK., HolzT.WillemsC., DüsselP. and LaskovP., Learning and classification of malware behor, in International Conference on Detection of Intrusions and Malware, and Vulnerability AssessmentSpringer, 2008, pp. 108–125.
13.
SantosI., LaordenC. and BringasP.G., Collective classification for unknown malware detection, in Security and Cryptography (SECRYPT), 2011 Proceedings of the International Conference on IEEE, 2011, pp. 251–256.
14.
SantosI., NievesJ., BringasP.G.Semi-supervised learning for unknown malware detection, in DCAI, Springer, 2011, pp. 415–422.
15.
SchultzM.G., EskinE., ZadokF. and StolfoS.J., Data mining methods for detection of new malicious executables, in Security and Privacy, 2001 S&P 2001 Proceedings 2001 IEEE Symposium on IEEE, 2001, pp. 38–19.
16.
SiddiquiM., WangM.C. and LeeJ., Detecting internet worms using data mining techniques, Journal of Systemics, Cybernetics and Informatics, 6(6) (2008), 48–53.
17.
TianR., BattenL.M. and VersteegS., Function length as a tool for malware classification, in Malicious and Unwanted Software, 2008 MALWARE 2008 3rd International Conference on IEEE, 2008, pp. 69–76.
18.
ZolkipliM.F. and JantanA., An approach for malware behavior identification and classification, in Computer Research and Development (ICCRD), 2011 3rd International Conference on, vol. 1. IEEE, 2011, pp. 191–194.
19.
ZhangX., ZhaoJ. and LeCunY., Character-level convolu-tional networks for text classification, in Advances in Neural Information Processing Systems, 2015, pp. 649–657.
20.
JozefowiczR., VinyalsO., SchusterM., ShazeerN. and WuY., Exploring the limits of language modeling, arXiv preprint arXiv:l602.02410, 2016.
ZhangX. and LeCunY., Text understanding from scratch, arXiv preprint arXiv: 1502.01710, 2015.
28.
TesauroG.J., KephartJ.O. and SorkinG.B., Neural networks for computer virus recognition, IEEE Expert, 11(4) (1996), 5–6.
29.
BankoM. and BrillE., Scaling to very very large corpora for natural language disambiguation, in Proceedings of the 39th Annual Meeting on Association for Computational Linguistics Association for Computational Linguistics, 2001, pp. 26–33.
30.
DahlG.E., StokesJ.W., DengL. and YuD., Large-scale malware classification using random projections and neural networks, in Acoustics, Speech and Signal Processing (ICASSP), 2013 IEEE International Conference on IEEE, 2013, pp. 3422–3426.
31.
SaxeJ. and BerlinK., Deep neural network based malware detection using two dimensional binary program features, in Malicious and Unwanted Software (MALWARE), 2015 10th International Conference on IEEE, 2015, pp. 11–20.
32.
HuangW., StokesJ.W.Mtnet: A multi-task neural network for dynamic malware classification, in Detection of Intrusions and Malware, and Vulnerability Assessment, Springer, 2016, pp. 399–418.
