Discover the SciOpen Platform and Achieve Your Research Goals with Ease.
Search articles, authors, keywords, DOl and etc.
Windows malware is becoming an increasingly pressing problem as the amount of malware continues to grow and more sensitive information is stored on systems. One of the major challenges in tackling this problem is the complexity of malware analysis, which requires expertise from human analysts. Recent developments in machine learning have led to the creation of deep models for malware detection. However, these models often lack transparency, making it difficult to understand the reasoning behind the model’s decisions, otherwise known as the black-box problem. To address these limitations, this paper presents a novel model for malware detection, utilizing vision transformers to analyze the Operation Code (OpCode) sequences of more than 350000 Windows portable executable malware samples from real-world datasets. The model achieves a high accuracy of 0.9864, not only surpassing the previous results but also providing valuable insights into the reasoning behind the classification. Our model is able to pinpoint specific instructions that lead to malicious behavior in malware samples, aiding human experts in their analysis and driving further advancements in the field. We report our findings and show how causality can be established between malicious code and actual classification by a deep learning model, thus opening up this black-box problem for deeper analysis.
O. Sharma, A. Sharma, and A. Kalia, Windows and IoT malware visualization and classification with deep CNN and xception CNN using Markov images, J. Intell. Inf. Syst., vol. 60, no. 2, pp. 349–375, 2023.
I. Kara and M. Aydos, The rise of ransomware: Forensic analysis for windows based ransomware attacks, Expert Systems with Applications, vol. 190, p. 116198, 2022.
A. I. A. Alzahrani, M. Ayadi, M. M. Asiri, A. Al-Rasheed, and A. Ksibi, Detecting the presence of malware and identifying the type of cyber attack using deep learning and VGG-16 techniques, Electronics, vol. 11, no. 22, p. 3665, 2022.
U. E. H. Tayyab, F. B. Khan, M. H. Durad, A. Khan, and Y. S. Lee, A survey of the recent trends in deep learning based malware detection, J. Cybersecur. Priv., vol. 2, no. 4, pp. 800–829, 2022.
S. Khan, M. Nauman, S. Ali Alsaif, T. Ali Syed, and H. A. Eleraky, Using capsule networks for android malware detection through orientation-based features, Comput. Mater. Cont., vol. 70, no. 3, pp. 5345–5362, 2022.
M. Nauta, D. Bucur, and C. Seifert, Causal discovery with attention-based convolutional neural networks, Mach. Learn. Knowl. Extr., vol. 1, no. 1, pp. 312–340, 2019.
M. Gopinath and S. C. Sethuraman, A comprehensive survey on deep learning based malware detection techniques, Comput. Sci. Rev., vol. 47, p. 100529, 2023.
X. Ling, L. F. Wu, J. Y. Zhang, Z. Q. Qu, W. Deng, X. Chen, Y. G. Qian, C. M. Wu, S. L. Ji, T. Y. Luo, et al., Adversarial attacks against windows PE malware detection: A survey of the state-of-the-art, Comput. Secur., vol. 128, p. 103134, 2023.
M. Rhode, P. Burnap, and K. Jones, Early-stage malware prediction using recurrent neural networks, Comput. Secur., vol. 77, pp. 578–594, 2018.
I. Rosenberg, G. Sicard, and E. David, End-to-end deep neural networks and transfer learning for automatic analysis of nation-state malware, Entropy (Basel), vol. 20, no. 5, p. 390, 2018.
U. Divakarla, K. H. K. Reddy, and K. Chandrasekaran, A novel approach towards windows malware detection system using deep neural networks, Proc. Comput. Sci., vol. 215, pp. 148–157, 2022.
C. Li, Q. J. Lv, N. Li, Y. Wang, D. G. Sun, and Y. Y. Qiao, A novel deep framework for dynamic malware detection based on API sequence intrinsic features, Comput. Secur., vol. 116, p. 102686, 2022.
S. S. Lad and A. C. Adamuthe, Improved deep learning model for static PE files malware detection and classification, Int. J. Comput. Network Inf. Secur., vol. 14, no. 2, pp. 14–26, 2022.
V. Ravi, M. Alazab, S. Selvaganapathy, and R. Chaganti, A multi-view attention-based deep learning framework for malware detection in smart healthcare systems, Comput. Commun., vol. 195, p. 73–81, 2022.
F. Xiao, Z. W. Lin, Y. Sun, and Y. Ma, Malware detection based on deep learning of behavior graphs, Mathemat. Problems Eng., vol. 2019, pp. 8195395, 2019.
Z. H. Cui, F. Xue, X. J. Cai, Y. Cao, G. G. Wang, and J. J. Chen, Detection of malicious code variants based on deep learning, IEEE Trans. Ind. Informat., vol. 14, no. 7, p. 3187–3196, 2018.
R. Chaganti, V. Ravi, and T. D. Pham, A multi-view feature fusion approach for effective malware classification using deep learning, J. Inf. Secur. Appl., vol. 72, p. 103402, 2023.
D. Gibert, J. Planes, C. Mateu, and Q. Le, Fusing feature engineering and deep learning: A case study for malware classification, Exp. Syst. Appl., vol. 207, p. 117957, 2022.
K. Tong, Y. Q. Wu, and F. Zhou, Recent advances in small object detection based on deep learning: A review, Image Vis. Comput., vol. 97, p. 103910, 2020.
D. Soydaner, A comparison of optimization algorithms for deep learning, Int. J. Patt. Recognit. Artif. Intell., vol. 34, no. 13, p. 2052013, 2020.
M. Roodschild, J. Gotay-Sardiñas, and A. Will, A new approach for the vanishing gradient problem on sigmoid activation, Progr. Artif. Intell., vol. 9, no. 4, pp. 351–360, 2020.
748
Views
197
Downloads
0
Crossref
0
Web of Science
0
Scopus
0
CSCD
Altmetrics
The articles published in this open access journal are distributed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/).