Abstract
In this paper, we present a novel method of differentiating known from previously unseen malware families. We utilize transfer learning by learning compact file representations that are used for a new classification task between previously seen malware families and novel ones. The learned file representations are composed of static and dynamic features of malware files and are invariant to small modifications that do not change the malware functionality. Using an extensive dataset that consists of thousands of variants of malicious files, we were able to achieve 97.7% accuracy when classifying between seen and unseen malware families. Our method provides an important focalizing tool for cybersecurity researchers and greatly improves the overall ability to adapt to the fast-moving pace of the current threat landscape.
Original language | English |
---|---|
Title of host publication | 2018 International Joint Conference on Neural Networks, IJCNN 2018 - Proceedings |
Publisher | Institute of Electrical and Electronics Engineers Inc. |
ISBN (Electronic) | 9781509060146 |
DOIs | |
State | Published - 10 Oct 2018 |
Externally published | Yes |
Event | 2018 International Joint Conference on Neural Networks, IJCNN 2018 - Rio de Janeiro, Brazil Duration: 8 Jul 2018 → 13 Jul 2018 |
Publication series
Name | Proceedings of the International Joint Conference on Neural Networks |
---|---|
Volume | 2018-July |
Conference
Conference | 2018 International Joint Conference on Neural Networks, IJCNN 2018 |
---|---|
Country/Territory | Brazil |
City | Rio de Janeiro |
Period | 8/07/18 → 13/07/18 |
Bibliographical note
Publisher Copyright:© 2018 IEEE.