A Deep Learning Framework for Three-Dimensional Malware Image Classification
Source abstract
Abstract
The rapid growth of sophisticated malware, including polymorphic, metamorphic, and zero-day threats, has made traditional signature-based and heuristic detection methods increasingly insufficient in modern desktop computing environments. As cyber threats continue to evolve in both complexity and scale, the demand for intelligent and adaptive malware detection mechanisms capable of identifying previously unseen attacks has become more critical than ever. In this study, we propose a novel deep learning framework for three-dimensional malware image classification that utilizes visual representation learning to improve malware detection performance. The proposed framework converts raw malware binaries into three-dimensional grayscale and RGB image representations, allowing hidden structural and spatial patterns within malware samples to be analyzed more effectively. By transforming malware data into multi-dimensional visual forms, the proposed system facilitates the process of automatically learning hierarchical features by CNN through multi-dimensional visualization of malware binary codes. In addition, an optimization technique using Genetic Algorithms is implemented within this architecture to improve classification performance and stability. The proposed evolutionary algorithm performs an effective search process within the large parameter space of 3D-CNN, leading to the identification of models that facilitate learning. It is shown that multi-dimensional visualization of malware achieves improved classification performance. It can be concluded that the combination of three-dimensional malware visualization, deep learning, and genetic optimization is promising for the development of future intelligent malware detection tools.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Advanced Malware Detection Techniques · Network Security and Intrusion Detection · Cell Image Analysis Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Computer Engineering Department, Biruni University, 34015 Istanbul, Türkiye
Computer Engineering Department, Fatih Sultan Mehmet Vakif University, 34010 Istanbul, Türkiye
Computer Engineering Department, Faculty of Technology, Marmara University, 34722 Istanbul, Türkiye
References (33)
Show source-provided references
1. Machine Learning in Malware Analysis: Current Trends and Future Directions
2. Center for Internet Security (CIS) (2026, May 01). Top 10 Malware Q1 2025. CISecurity.org. Available online: https://www.cisecurity.org/insights/blog/top-10-malware-q1-2025.
3. Early Detection of Windows Cryptographic Ransomware Based on Pre-Attack API Calls Features and Machine Learning10.37934/araset.39.2.110131 ↗
4. Subhash, P., Varsha, Y.S., Reddy, K.S., Akshaya, B., and Kalyani, S. (2023). Visual Profiling and Automated Classification of Malware Samples using Deep Learning. Proceedings of the International e-Conference on Advances in Computer Engineering and Communication Systems (ICACECS 2023), Atlantis Press. Atlantis Highlights in Computer Sciences.10.2991/978-94-6463-314-6_25 ↗
5. Classification of Malware using Machine learning and Deep learning Techniques
6. Overview of Mobile Attack Detection and Prevention Techniques Using Machine Learning10.3991/ijim.v18i10.46485 ↗
7. Scientometric Analysis and Knowledge Mapping of Cybersecurity
8. An Open Source, Extensible Malware Analysis Platform10.1051/matecconf/201818805009 ↗
9. A Comprehensive Review on Malware Detection Approaches10.1109/ACCESS.2019.2963724 ↗
10. Redhu, A., Choudhary, P., Srinivasan, K., and Das, T.K. (2024). Deep learning-powered malware detection in cyberspace: A contemporary review. Front. Phys., 12.10.3389/fphy.2024.1349463 ↗
11. Shokouhinejad, H., Razavi-Far, R., Mohammadian, H., Rabbani, M., Ansong, S., Higgins, G., and Ghorbani, A.A. (2025). Recent Advances in Malware Detection: Graph Learning and Explainability. arXiv.
12. A Survey on Visualization-Based Malware Detection10.32604/jcs.2022.033537 ↗
13. Brosolo, M., Asmitha, K.A., Conti, M., Rafidha Rehiman, K.A., Muhammed Shafi, K.P., Nicolazzo, S., Nocera, A., and Vinod, P. (2025). Security through the Eyes of AI: How Visualization is Shaping Malware Detection. arXiv.10.1016/j.cosrev.2026.100914 ↗
14. A Survey of Malware Detection Using Deep Learning
15. Hosseinnia, M., and Behrad, A. (2023). 3D Image Annotation using Deep Learning and View-based Image Features. 2023 6th International Conference on Pattern Recognition and Image Analysis (IPRIA), IEEE.10.1109/IPRIA59240.2023.10147190 ↗
16. MIRACLE: Malware Image Recognition and Classification by Layered Extraction10.1007/s10618-024-01078-z ↗
17. A Multi-View Attention-Based Deep Learning Framework for Malware Detection in Smart Healthcare Systems10.1016/j.comcom.2022.08.015 ↗
18. Ran, J., Chen, Y., and Li, S. (2018). Three-Dimensional Convolutional Neural Network Based Traffic Classification for Wireless Communications. 2018 IEEE Global Conference on Signal and Information Processing (GlobalSIP), IEEE.10.1109/GlobalSIP.2018.8646659 ↗
19. Zhao, Z., Yang, S., and Zhao, D. (2023). A New Framework for Visual Classification of Multi-Channel Malware Based on Transfer Learning. Appl. Sci., 13.10.3390/app13042484 ↗
20. Li, J., Pan, Z., and Jiang, K. (2025). A Three-Dimensional Convolutional Neural Network for Dark Web Traffic Classification Based on Multi-Channel Image Deep Learning. Computers, 14.10.3390/computers14080295 ↗
21. 3DMalDroid: A Novel 3D Image-Based Approach for Android Malware Detection and Classification10.1016/j.compeleceng.2025.110542 ↗
22. Khalfi, Z.E., Hazzat, S.E., and Yakhlef, M.B. (2024). Comparison between 2D Classification and 3D Classification based on Deep Learning. 2024 3rd International Conference on Embedded Systems and Artificial Intelligence (ESAI), IEEE.10.1109/ESAI62891.2024.10913611 ↗
23. Jiang, C., Yin, K., Xia, C., and Huang, W. (2022). FedHGCDroid: An Adaptive Multi-Dimensional Federated Learning for Privacy-Preserving Android Malware Classification. Entropy, 24.10.3390/e24070919 ↗
24. A Novel Image Based Approach for Mobile Android Malware Detection and Classification10.1016/j.knosys.2025.113855 ↗
25. Mercaldo, F., Martinelli, F., and Santone, A. (2024). Deep Convolutional Generative Adversarial Networks in Image-Based Android Malware Detection. Computers, 13.10.3390/computers13060154 ↗
26. GDroid: Android Malware Detection and Classification with Graph Convolutional Network10.1016/j.cose.2021.102264 ↗
27. A Novel Malware Classification and Augmentation Model Based on Convolutional Neural Network10.1016/j.cose.2021.102515 ↗
28. Machine Learning Based Fileless Malware Traffic Classification Using Image Visualization10.1186/s42400-023-00170-z ↗
29. Catch Them Alive: A Malware Detection Approach Through Memory Forensics, Manifold Learning and Computer Vision10.1016/j.cose.2020.102166 ↗
30. Iosifache, G.-A. (2026, May 01). DikeDataset: Dataset with Labeled Benign and Malicious PE and OLE Files. GitHub Repository. Available online: https://github.com/iosifache/DikeDataset.
31. Aslan, M. (2026, May 01). Windows Benign Executable Dataset. GitHub Repository. Available online: https://github.com/MuharremAsln/Benign-Dataset.
32. Frederick, R., Shapiro, J., and Calix, R.A. (2022). A Corpus of Encoded Malware Byte Information as Images for Efficient Classification. 2022 16th International Conference on Signal-Image Technology & Internet-Based Systems (SITIS), IEEE.10.1109/SITIS57111.2022.00014 ↗
33. Neel, L.E., Copiaco, A., Obaid, W., and Mukhtar, H. (2022). Comparison of Feature Extraction and Classification Techniques of PE Malware. 2022 5th International Conference on Signal Processing and Information Security (ICSPIS), IEEE.10.1109/ICSPIS57063.2022.10002693 ↗