journal article·2022-12-07Open access

Binary and Multi-Class Malware Threads Classification

Ismail Taha Ahmed, Norziana Jamil, Marina Md. Din, Baraa Tareq Hammad

Applied Sciences· Volume 12· Issue 24

Abstract

The security of a computer system can be harmed by specific applications, such as malware. Malware comprises unwanted, dangerous enemies that aim to compromise the security and generate significant loss. Consequently, Malware Detection (MD) and Malware Classification (MC) has emerged as a key issue for the cybersecurity society. MD only involves locating malware without determining what kind of malware it is, but MC comprises assigning a class of malware to a particular sample. Recently, a few techniques for analyzing malware quickly have been put out. However, there remain numerous difficulties, such as the low classification accuracy of samples from related malware families, the computational complexity, and consumption of resources. These difficulties make detecting and classifying malware very challenging. Therefore, in this paper, we proposed an efficient malware detection and classification technique that combines Segmentation-based Fractal Texture Analysis (SFTA) and Gaussian Discriminant Analysis (GDA). The outcomes of the experiment demonstrate that the SFTA-GDA produces a high classification rate. There are three main steps involved in our malware analysis, namely: (i) malware conversion; (ii) feature extraction; and (iii) classification. We initially convert the RGB malware images into grayscale malware images for effective malware analysis. The SFTA and Gabor features are then extracted from gray-scale images in the feature extraction step. Finally, the classification is carried out by GDA and Naive Bayes (NB). The proposed method is evaluated on a common MaleVis dataset. The proposed SFTA-GDA is the effective choice since it produces the highest accuracy rate across all families of the MaleVis Database. Experimental findings indicate that the accuracy rate was 98%, which is higher than the overall accuracy from the existing state-of-the-art methods.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Advanced Malware Detection Techniques · Network Security and Intrusion Detection · Anomaly Detection Techniques and Applications

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

College of Computer Sciences and Information Technology, University of Anbar, Anbar 55431, Iraq

Institute of Informatics and Computing in Energy, Universiti Tenaga Nasional, Jalan Ikram-Uniten, Kajang 43000, Selangor, Malaysia

Funding

Publication Fund under the Tan Sri Leo Moggie Chair of Energy Informatics, Institute of Informatics and Computing in Energy, Universiti Tenaga Nasional

References (45)

Show source-provided references
1. Poudyal, S., Akhtar, Z., Dasgupta, D., and Gupta, K.D. (2019, January 6–9). Malware analytics: Review of data mining, machine learning and big data perspectives. Proceedings of the 2019 IEEE Symposium Series on Computational Intelligence (SSCI), Xiamen, China.10.1109/SSCI44817.2019.9002996 ↗
2. Hemalatha, J., Roseline, S.A., Geetha, S., Kadry, S., and Damaševičius, R. (2021). An efficient densenet-based deep learning model for malware detection. Entropy, 23.10.3390/e23030344 ↗
3. Internet Security Threat Report-Ransomware 2017
4. Makandar, A., and Patrot, A. (2017, January 24–26). Malware class recognition using image processing techniques. Proceedings of the 2017 International Conference on Data Management, Analytics and Innovation (ICDMAI), Pune, India.10.1109/ICDMAI.2017.8073489 ↗
5. Multiclass malware classification via first-and second-order texture statistics10.1016/j.cose.2020.101895 ↗
6. Aslan, Ö. (2017, January 20–21). Performance comparison of static malware analysis tools versus antivirus scanners to detect malware. Proceedings of the International Multidisciplinary Studies Congress (IMSC), Solin, Croatia.
7. Identification of malicious code variants based on image visualization10.1016/j.compeleceng.2019.03.015 ↗
8. Dynamic analysis of malicious code10.1007/s11416-006-0012-2 ↗
9. Nataraj, L., Karthikeyan, S., Jacob, G., and Manjunath, B.S. (2011, January 20). Malware images: Visualization and automatic classification. Proceedings of the 8th International Symposium on Visualization for Cyber Security, Pittsburgh PA, USA.10.1145/2016904.2016908 ↗
10. Nataraj, L., Yegneswaran, V., Porras, P., and Zhang, J. A comparative assessment of malware classification using binary texture analysis and dynamic analysis. Proceedings of the 4th ACM Workshop on Security and Artificial Intelligence, Chicago, IL, USA.
11. Torralba, A., Murphy, K.P., Freeman, W.T., and Rubin, M.A. (2003, January 13–16). Context-based vision system for place and object recognition. Proceedings of the Ninth IEEE International Conference on Computer Vision, Nice, France.10.1109/ICCV.2003.1238354 ↗
12. Modeling the shape of the scene: A holistic representation of the spatial envelope10.1023/A:1011139631724 ↗
13. Malware analysis using visualized image matrices10.1155/2014/132713 ↗
14. Gandotra, E., Bansal, D., and Sofat, S. (2014, January 9–11). Integrated framework for classification of malwares. Proceedings of the 7th International Conference on Security of Information and Networks, Scotland, UK.10.1145/2659651.2659738 ↗
15. Malware analysis using visualized images and entropy graphs10.1007/s10207-014-0242-0 ↗
16. Robust intelligent malware detection using deep learning10.1109/ACCESS.2019.2906934 ↗
17. Large-Scale Malicious Software Classification With Fuzzified Features and Boosted Fuzzy Random Forest10.1109/TFUZZ.2020.3016023 ↗
18. Kong, D., and Yan, G. (2013, January 11–14). Discriminant malware distance learning on structural information for automated malware classification. Proceedings of the 19th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Chicago, IL, USA.10.1145/2487575.2488219 ↗
19. Kosmidis, K., and Kalloniatis, C. (2017, January 28–30). Machine learning and images for malware detection and classification. Proceedings of the 21st Pan-Hellenic Conference on Informatics, Larissa, Greece.10.1145/3139367.3139400 ↗
20. Xiaofang, B., Li, C., Weihua, H., and Qu, W. (June, January 31). Malware variant detection using similarity search over content fingerprint. Proceedings of the 26th Chinese Control and Decision Conference (2014 CCDC), Changsha, China.10.1109/CCDC.2014.6852216 ↗
21. A new learning approach to malware classification using discriminative feature extraction10.1109/ACCESS.2019.2892500 ↗
22. Malware visualization for fine-grained classification10.1109/ACCESS.2018.2805301 ↗
23. Liu, L., and Wang, B. (2016, January 19–21). Malware classification using gray-scale images and ensemble learning. Proceedings of the 2016 3rd International Conference on Systems and Informatics (ICSAI), Shanghai, China.10.1109/ICSAI.2016.7811100 ↗
24. Catch them alive: A malware detection approach through memory forensics, manifold learning and computer vision10.1016/j.cose.2020.102166 ↗
25. Costa, A.F., Humpire-Mamani, G., and Traina, A.J.M. (2012, January 22–25). An efficient algorithm for fractal analysis of textures. Proceedings of the 2012 25th SIBGRAPI Conference on Graphics, Patterns and Images, Ouro Preto, Brazil.10.1109/SIBGRAPI.2012.15 ↗
26. Hammad, B.T., Ahmed, I.T., and Jamil, N. (2022). A Steganalysis Classification Algorithm Based on Distinctive Texture Features. Symmetry, 14.10.3390/sym14020236 ↗
27. Uncertainty relation for resolution in space, spatial frequency, and orientation optimized by two-dimensional visual cortical filters10.1364/JOSAA.2.001160 ↗
28. 2D Gabor filters-based steganalysis of content-adaptive JPEG steganography10.1007/s11042-016-4157-9 ↗
29. Zheng, D., Zhao, Y., and Wang, J. (2004, January 23–25). Features extraction using a Gabor filter family. Proceedings of the sixth Lasted International Conference, Signal and Image Processing, Hawaii, HI, USA.
30. Feature extraction and analysis using Gabor filter and higher order statistics for the JPEG steganography
31. Ahmed, I.T., Hammad, B.T., and Jamil, N. (2021). Common Gabor Features for Image Watermarking Identification. Appl. Sci., 11.10.3390/app11188308 ↗
32. Kamarainen, J.-K. (2012, January 15–18). Gabor features in image analysis. Proceedings of the 2012 3rd International Conference on Image Processing Theory, Tools and Applications (IPTA), Istanbul, Turkey.10.1109/IPTA.2012.6469502 ↗
33. Lowd, D., and Domingos, P. (2005, January 7–11). Naive Bayes models for probability estimation. Proceedings of the 22nd International Conference on Machine Learning, Bonn, Germany.10.1145/1102351.1102418 ↗
34. Estimation of shape parameter for generalized Gaussian distributions in subband decompositions of video10.1109/76.350779 ↗
35. Bozkir, A.S., Cankaya, A.O., and Aydos, M. (2019, January 24–26). Utilization and comparision of convolutional neural networks in malware recognition. Proceedings of the 2019 27th Signal Processing and Communications Applications Conference (SIU), Sivas, Turkey.10.1109/SIU.2019.8806511 ↗
36. Patil, S., Varadarajan, V., Walimbe, D., Gulechha, S., Shenoy, S., Raina, A., and Kotecha, K. (2021). Improving the Robustness of AI-Based Malware Detection Using Adversarial Machine Learning. Algorithms, 14.10.3390/a14100297 ↗
37. Hammad, B.T., Jamil, N., Ahmed, I.T., Zain, Z.M., and Basheer, S. (2022). Robust Malware Family Classification Using Effective Features and Classifiers. Appl. Sci., 12.10.3390/app12157877 ↗
38. A comparative analysis of image copy-move forgery detection algorithms based on hand and machine-crafted features
39. Ahmed, I.T., Hammad, B.T., and Jamil, N. (2021, January 5–6). Image Copy-Move Forgery Detection Algorithms Based on Spatial Feature Domain. Proceedings of the 2021 IEEE 17th International Colloquium on Signal Processing & Its Applications (CSPA), Langkawi, Malaysia.10.1109/CSPA52141.2021.9377272 ↗
40. Improve of contrast-distorted image quality assessment based on convolutional neural networks
41. Detecting and classifying android malware using static analysis along with creator information10.1155/2015/479174 ↗
42. Wavelet statistical feature based malware class recognition and classification using supervised learning classifier10.13005/ojcst/10.02.20 ↗
43. Visual malware detection using local malicious pattern10.1007/s11416-018-0314-1 ↗
44. Nisa, M., Shah, J.H., Kanwal, S., Raza, M., Khan, M.A., Damaševičius, R., and Blažauskas, T. (2020). Hybrid malware classification method using segmentation-based fractal texture analysis and deep convolution neural network features. Appl. Sci., 10.10.3390/app10144966 ↗
45. Mohammed, T.M., Nataraj, L., Chikkagoudar, S., Chandrasekaran, S., and Manjunath, B.S. (2021). Malware detection using frequency domain-based image visualization and deep learning. arXiv.10.24251/HICSS.2021.858 ↗