Impact of Portable Executable Header Features on Malware Detection燗ccuracy
Source abstract
Abstract
One aspect of cybersecurity, incorporates the study of Portable Executables (PE) files maleficence. Artificial Intelligence (AI) can be employed in such studies, since AI has the ability to discriminate benign from malicious files. In this study, an exclusive set of 29 features was collected from trusted implementations, this set was used as a baseline to analyze the presented work in this research. A Decision Tree (DT) and Neural Network Multi-Layer Perceptron (NN-MLPC) algorithms were utilized during this work. Both algorithms were chosen after testing a few diverse procedures. This work implements a method of subgrouping features to answer questions such as, which feature has a positive impact on accuracy when added? Is it possible to determine a reliable feature set to distinguish a malicious PE file from a benign one? when combining features, would it have any effect on malware detection accuracy in a PE file? Results obtained using the proposed method were improved and carried few observations. Generally, the obtained results had practical and numerical parts, for the practical part, the number of features and which features included are the main factors impacting the calculated accuracy, also, the combination of features is as crucial in these calculations. Numerical results included, finding accuracies with enhanced values, for example, NN_MLPC attained 0.979 and 0.98; for DT an accuracy of 0.9825 and 0.986 was attained.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Advanced Malware Detection Techniques · Network Security and Intrusion Detection · Digital and Cyber Forensics
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (41)
Show source-provided references
1. A malware detection scheme based on mining format information10.1155/2014/260905 ↗
2. PE-Header-based malware study and detection
3. A learning model to detect maliciousness of portable executable using integrated feature set10.1016/j.jksuci.2017.01.003 ↗
4. Effect of PE file header features on accuracy
5. Detecting anomaly based network intrusion using feature extraction and classification techniques
6. A survey of malware detection techniques based on machine learning
7. Portable executable scoring What is your malicious score?
8. A deep reinforcement learning malware detection method based on PE feature distribution
9. An efficient approach for malware detection using PE header specifications
10. Detecting unknown malicious executables using portable executable headers
11. Detection of packed executables using support vector machines
12. Signature-based and behavior-based attack detection with machine learning for home IoT devices
13. New system for secure cover file of hidden data in the image page within executable file using statistical steganography techniques
14. Building contemporary and efficient static models for malware detection
15. PE file features in detection of packed executables10.7763/IJCTE.2012.V4.512 ↗
16. A static heuristic approach to detecting malware targets10.1002/sec.1228 ↗
17. Detection and prevention system against cyber-attacks and botnet malware for information systems and internet of things
18. Learning the PE header, malware detection with minimal domain knowledge
19. A virus detection model using portable executable feature extraction
20. An improved method for packed malware detection using PE header and section table information10.5815/ijcnis.2019.09.02 ↗
21. Malware detection and classification based on N-grams attribute similarity
22. Detecting forensically relevant information from PE executables
23. Detection of malicious portable executables using evidence combinational theory with fuzzy hashing
24. Implementation of portable executable file analysis framework (PEFAF)
25. Machine learning techniques to detect maliciousness of portable executable files
26. Malware classification of portable executables using tree-based ensemble machine learning
27. Opcodes histogram for classifying metamorphic portable executables malware
28. Two techniques for detecting packed portable executable files
29. Analysis study of malware classification portable executable using hybrid machine learning
30. Research on autoencdoer technology for malware feature purification
31. Portable executable malware classifier using long short term memory and sophos-reversinglabs 20 million dataset
32. Static detection of ransomware using LSTM network and PE header
33. Robust detection model for portable execution malware
34. Static malware detection using stacked BiLSTM and GPT-210.1109/ACCESS.2022.3179384 ↗
35. Malware detection using lightGBM with a custom logistic loss function10.1109/ACCESS.2022.3171912 ↗
36. Malware detection based on multiple PE headers identification and optimization for specific types of files
37. Parisi · Hands-on Artificial Intelligence for Cybersecurity. Implement Smart AI Systems for Preventing Cyber-Attacks and Detecting Threats and Network Anomalies · 2019 · 82
38. Benign and malicious PE Files dataset for malware detection
39. Josh · Artificial Intelligence with Python. A Comprehensive Guide to Building Intelligent Apps for Python Beginners and Developers · 2017 · 363
40. New technique of hidden data in PE-file with in unused area one
41. The use of python in the field of artificial intelligence