An Efficient Malware Classification Method Using Novel Deep Learning Model

Malware attacks getting increased due to the increased complexity in their structures have become a key threat to cybersecurity and require better and more efficient means of detection. Signature and heuristic methods of detecting malware do not perform well due to slow developments in this field and thus current detection uses machine learning and deep learning approaches. However, it is seen that high dimensionality and the complexity of malware data are major problems in terms of existing solutions, such as computational burden and overfitting. The presented work in this thesis aims to design a new malware detection framework using ResNet50 deep neural networks fine-tuned with a new wrapper-based feature selection technique operated by the GOA. The supporting framework also takes advantage of the transfer learning feature in ResNet50, a robust convolutional neural network, for feature extraction from malware data. Every slight hint related to malware is learnt by the model through training using ResNet50 on malware datasets. In addition to this, the GOA-based feature selection approach is used to help define the most important features as input to the neural network as well as to relieve the computational load. To assess the effectiveness of the proposed approach, the benchmark datasets of malware were used, and their results were compared to the traditional and recent methods. The findings affirm that the proposed ResNet50-GOA framework for fine-tuning outperforms the competitors by a significant margin in terms of the detection rate and by improved accuracy, precision, recall, area under the precision-recall curve, and F1-score, which illustrates high robustness and fewer false positive cases and complex computation. In addition, the proposed framework is immune to issues like class imbalance and discovers new patterns of emerging malware. This paper fulfills the following gaps in existing literature: It proposes a new approach for detecting malware that is more efficient and scalable than deep learning and metaheuristic optimization algorithms. The results speak to the promise of a combination of techniques in addressing multi-faceted cybersecurity issues, which opens further possibilities for the improvement of automated threat identification systems in the future

Authors

Institutions

Publication Details

Journal
AURUM Journal of Engineering Systems and Architecture
Published
2024-11-20
DOI
https://doi.org/10.53600/ajesa.1587757
Primary Topic
Advanced Malware Detection Techniques
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

An Efficient Malware Classification Method Using Novel Deep Learning Model

Sefer Kurnaz, Zinah Khalid Jasim Jasim
AURUM Journal of Engineering Systems and Architecture
Advanced Malware Detection Techniques
article

An Efficient Malware Classification Method Using Novel Deep Learning Model

Sefer Kurnaz, Zinah Khalid Jasim Jasim
article en

Abstract

Malware attacks getting increased due to the increased complexity in their structures have become a key threat to cybersecurity and require better and more efficient means of detection. Signature and heuristic methods of detecting malware do not perform well due to slow developments in this field and thus current detection uses machine learning and deep learning approaches. However, it is seen that high dimensionality and the complexity of malware data are major problems in terms of existing solutions, such as computational burden and overfitting. The presented work in this thesis aims to design a new malware detection framework using ResNet50 deep neural networks fine-tuned with a new wrapper-based feature selection technique operated by the GOA. The supporting framework also takes advantage of the transfer learning feature in ResNet50, a robust convolutional neural network, for feature extraction from malware data. Every slight hint related to malware is learnt by the model through training using ResNet50 on malware datasets. In addition to this, the GOA-based feature selection approach is used to help define the most important features as input to the neural network as well as to relieve the computational load. To assess the effectiveness of the proposed approach, the benchmark datasets of malware were used, and their results were compared to the traditional and recent methods. The findings affirm that the proposed ResNet50-GOA framework for fine-tuning outperforms the competitors by a significant margin in terms of the detection rate and by improved accuracy, precision, recall, area under the precision-recall curve, and F1-score, which illustrates high robustness and fewer false positive cases and complex computation. In addition, the proposed framework is immune to issues like class imbalance and discovers new patterns of emerging malware. This paper fulfills the following gaps in existing literature: It proposes a new approach for detecting malware that is more efficient and scalable than deep learning and metaheuristic optimization algorithms. The results speak to the promise of a combination of techniques in addressing multi-faceted cybersecurity issues, which opens further possibilities for the improvement of automated threat identification systems in the future

AURUM Journal of Engineering Systems and Architecture
Altınbaş University (TR)
Openalex Percentile: Top 76%
Advanced Malware Detection Techniques
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.