Detection of Malware Attacks using Artificial Neural Network
DOI:
https://doi.org/10.21015/vtcs.v11i2.1692Abstract
Malware attacks are increasing rapidly as the technology continues to become prevalent. These attacks have become extremely difficult to detect as they continuously change their mechanism for exploitation of vulnerabilities in software. The conventional approaches to malware detection become ineffective due to a large number of varying patterns and sequences, thereby requiring artificial intelligence-based approaches for the detection of malware attacks. In this paper, we propose an artificial neural network-based model for malware detection. Our proposed model is generic as it can be applied to multiple datasets. We have compared our model with different machine-learning approaches. The experimentation results show that the proposed model can outperform other well-known approach as it achieves 99.6\% , 98.9\% and 99.9\% accuracy on the Windows API call dataset, Top PE Imports Dataset and Malware Dataset, respectively.
References
!
M. Kammerstetter, C. Platzer, and G. Wondracek, "Vanity, cracks and malware," pp. 809–820, 2012, doi: 10.1145/2382196.2382282.
M. Issakhani, P. Victor, A. Tekeoglu, and A. Lashkari, "PDF Malware Detection based on Stacking Learning," pp. 562–570, 2022, doi: 10.5220/0010908400003120.
S. Akarsh, K. Simran, P. Poornachandran, V. K. Menon, and P. K. Soman, "Deep Learning Framework and Visualization for Malware Classification," 2019 5th Int. Conf. Adv. Comput. Commun. Syst. ICACCS 2019, pp. 1059–1063, 2019, doi: 10.1109/ICACCS.2019.8728471.
J. J. A. Barriga and S. G. Yoo, "Malware detection and evasion with machine learning techniques: A survey," Int. J. Appl. Eng. Res., vol. 12, no. 18, pp. 7207–7214, 2017.
J. Saxe and K. Berlin, "Deep neural network based malware detection using two-dimensional binary program features," 2015 10th Int. Conf. Malicious Unwanted Software, MALWARE 2015, pp. 11–20, 2016, doi: 10.1109/MALWARE.2015.7413680.
D. Gavriluţ, M. Cimpoeşu, D. Anton, and L. Ciortuz, "Malware detection using machine learning," Proc. Int. Multiconference Comput. Sci. Inf. Technol. IMCSIT ’09, vol. 4, no. November, pp. 735–741, 2009, doi: 10.1109/IMCSIT.2009.5352759.
S. Gupta, H. Sharma, and S. Kaur, "Malware characterization using Windows API call sequences," J. Cyber Secur. Mobil., vol. 7, no. 4, pp. 363–378, 2018, doi: 10.13052/jcsm2245-1439.741.
"50+ Cybersecurity Statistics, Facts, and Figures for 2023." https://www.techopedia.com/cybersecurity-statistics (accessed Jul. 23, 2023).
Y. M. Malgwi, I. Goni, and B. M. Ahmad, "Artificial Neural Network Model for Intrusion Detection System," Mediterr. J. Basic Appl. Sci., vol. 06, no. 01, pp. 20–26, 2022, doi: 10.46382/mjbas.2022.6103.
F. A. Aboaoja, A. Zainal, F. A. Ghaleb, B. A. S. Al-rimy, T. A. E. Eisa, and A. A. H. Elnour, "Malware Detection Issues, Challenges, and Future Directions: A Survey," Appl. Sci., vol. 12, no. 17, p. 8482, 2022, doi: 10.3390/app12178482.
C. Rohith and G. Kaur, "A Comprehensive Study on Malware Detection and Prevention Techniques used by Anti-Virus," Proc. 2021 2nd Int. Conf. Intell. Eng. Manag. ICIEM 2021, pp. 429–434, 2021, doi: 10.1109/ICIEM51511.2021.9445322.
S. R. Swamy and F. V, "Sandbox: A Secured Testing Framework for Applications," J. Technol. Eng. Sci., vol. 4, no. 1, pp. 1–8, 2020.
G. González-granadillo, S. González-zarzosa, and R. Diaz, "Trends, and Usage in Critical Infrastructures," 2021.
E. V P K, A. Purushottam Adarsh, S. Sai Likith Reddy, and P. Renjith, "Detection Of Malware Using CNN," 2022 2nd Int. Conf. Comput. Sci. Eng. Appl. ICCSEA 2022, 2022, doi: 10.1109/ICCSEA54677.2022.9936225.
M. S. Akhtar and T. Feng, "Detection of Malware by Deep Learning as CNN-LSTM Machine Learning Techniques in Real Time," Symmetry (Basel)., vol. 14, no. 11, 2022, doi: 10.3390/sym14112308.
M. A. Halim, A. Abdullah, and K. A. Z. Ariffin, "Recurrent neural network for malware detection," Int. J. Adv. Soft Comput. its Appl., vol. 11, no. 1, pp. 46–63, 2019.
A. Sharma and U. Tyagi, "A Hybrid Approach of ANN-GWO Technique for Intrusion Detection," 2021.
"Number of malware attacks per year 2022 | Statista." https://www.statista.com//statistics//873097// malware attacks per year worldwide (accessed Jan. 09, 2024).
R. Ali, A. Ali, F. Iqbal, M. Hussain, and F. Ullah, "Deep Learning Methods for Malware and Intrusion Detection: A Systematic Literature Review," Secur. Commun. Networks, vol. 2022, 2022, doi: 10.1155/2022/2959222.
K. F. Hasan, A. Akhter, M. A. Yousuf, F. Alharbi, and M. A. Moni, "A Dependable Hybrid Machine Learning Model for Network Intrusion Detection".
R. Kumar and S. Geetha, "Malware classification using XGboost-Gradient boosted decision tree," Adv. Sci. Technol. Eng. Syst., vol. 5, no. 5, pp. 536–549, 2020, doi: 10.25046/AJ050566.
O. Olowoyo and P. A. Owolawi, "Detection of Malware using Artificial Neural Networks," Proc. - 2019 Int. Multidiscip. Inf. Technol. Eng. Conf. IMITEC 2019, 2019, doi: 10.1109/IMITEC45504.2019.9015848.
D. Kolar, "A REVIEW ON IDENTIFICATION AND," vol. 8, no. 7, pp. 714–720, 2021.
S. I. Imtiaz, S. ur Rehman, A. R. Javed, Z. Jalil, X. Liu, and W. S. Alnumay, "DeepAMD: Detection and identification of Android malware using high-efficient Deep Artificial Neural Network," Futur. Gener. Comput. Syst., vol. 115, pp. 844–856, 2021, doi: 10.1016/j.future.2020.10.008.
V. Anandhi, P. Vinod, V. G. Menon, and K. M. Aditya, "Performance evaluation of deep neural network on malware detection: visual feature approach," Cluster Comput., vol. 25, no. 6, pp. 4601–4615, 2022, doi: 10.1007/s10586-022-03702-3.
P. Kotian and R. Sonkusare, "Detection of Malware in Cloud Environment using Deep Neural Network," 2021 6th Int. Conf. Converg. Technol. I2CT 2021, pp. 1–5, 2021, doi: 10.1109/I2CT51068.2021.9417901.
M. F. Rafique, M. Ali, A. S. Qureshi, A. Khan, and A. M. Mirza, "Malware Classification using Deep Learning based Feature Extraction and Wrapper based Feature Selection Technique," pp. 1–21, 2019, [Online]. Available: http://arxiv.org/abs/1910.10958.
A. Makandar and A. Patrot, "Malware analysis and classification using Artificial Neural Network," Int. Conf. Trends Autom. Commun. Comput. Technol. I-TACT 2015, 2016, doi: 10.1109/ITACT.2015.7492653.
M. Almahmoud, D. Alzu’bi, and Q. Yaseen, "Redroiddet: Android malware detection based on recurrent neural network," Procedia Comput. Sci., vol. 184, pp. 841–846, 2021, doi: 10.1016/j.procs.2021.03.105.
A. Mahindru and A. L. Sangal, "SOMDROID : android malware detection by artificial neural network trained using unsupervised learning," vol. 15, no. 1. Springer Berlin Heidelberg, 2022. doi: 10.1007/s12065-020-00518-1.
S. Balasunthar and Z. Abdullah, "Comparison of Convolutional Neural Network and Artificial Neural Network for Android Botnet Attack Detection," vol. 3, no. 2, pp. 32–49, 2022.
R. Mitsuhashi and T. Shinagawa, "High-Accuracy Malware Classification with a Malware-Optimized Deep Learning Model," no. August, 2020, [Online]. Available: http://arxiv.org/abs/2004.05258.
A. M. N. Zaza, S. K. Kharroub, and K. Abualsaud, "Lightweight IoT Malware Detection Solution Using CNN Classification," 2020 IEEE 3rd 5G World Forum, 5GWF 2020 - Conf. Proc., pp. 212–217, 2020, doi: 10.1109/5GWF49715.2020.9221100.
H. Hossain, S. I. Kayum, A. Paul, A. A. Rohan, N. Tasnim, and M. I. Hossain, "Malware Detection Using Neural Networks," 2021 5th Int. Conf. Electr. Inf. Commun. Technol. EICT 2021, no. December, pp. 17–19, 2021, doi: 10.1109/EICT54103.2021.9733457.
E. Rezende, G. Ruppert, T. Carvalho, A. Theophilo, F. Ramos, and P. de Geus, "Malicious Software Classification Using VGG16 Deep Neural Network’s Bottleneck Features," Adv. Intell. Syst. Comput., vol. 738, no. July, pp. 51–59, 2018, doi: 10.1007/978-3-319-77028-4-9.
B. B. Rad, M. K. H. Nejad, and M. Shahpasand, "Malware classification and detection using artificial neural network," J. Eng. Sci. Technol., vol. 13, no. Special Issue on ICCSIT 2018, pp. 14–23, 2018.
Y. N. Soe, P. I. Santosa, and R. Hartanto, "DDoS Attack Detection Based on Simple ANN with SMOTE for IoT Environment," Proc. 2019 4th Int. Conf. Informatics Comput. ICIC 2019, pp. 0–4, 2019, doi: 10.1109/ICIC47613.2019.8985853.
S. Ann, "Network Intrusion Detection Using Stack-Ensemble ANN," pp. 1104–1109, 2022.
S. Hosseini, B. Mohammad, and H. Zade, "New hybrid method for attack detection using a combination of evolutionary algorithms, SVM, and ANN," Comput. Networks, vol. 173, no. March, p. 107168, 2020, doi: 10.1016/j.comnet.2020.107168.
A. Jamal, M. Faisal Hayat, and M. Nasir, "Malware Detection and Classification in IoT Network using ANN," Mehran Univ. Res. J. Eng. Technol., vol. 41, no. 1, pp. 80–91, 2022, doi: 10.22581/muet1982.2201.08.
H. Zhao, Y. Feng, H. Koide, and K. Sakurai, "An ANN Based Sequential Detection Method for Balancing Performance Indicators of IDS," pp. 239–244, 2019, doi: 10.1109/CANDAR.2019.00039.
E. M. B. Karbab, M. Debbabi, A. Derhab, and D. Mouheb, "MalDozer: Automatic framework for android malware detection using deep learning," in Proc. 5th Annu. DFRWS Eur., DFRWS 2018 EU, vol. 24, pp. S48–S59, 2018. doi: 10.1016/j.diin.2018.01.007.
T. A. Assegie, "An optimized KNN model for signature-based malware detection," Int. J. Comput. Eng. Res. Trends (IJCERT), vol. no. 2, pp. 2349–7084, 2021.
F. Ullah, G. Srivastava, and S. Ullah, "A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization," J. Cloud Comput., vol. 11, no. 1, 2022. doi: 10.1186/s13677-022-00349-8.
A. Andreatos and V. Moussas, "A Novel Intrusion Detection System Based on Neural Networks," vol. 7, pp. 1–4, 2019.
R. Talaei, P. Yaser, and R. Mohsen, "Spam detection through feature selection using artificial neural network and sine – cosine algorithm," Math. Sci., vol. 14, no. 3, pp. 193–199, 2020. doi: 10.1007/s40096-020-00327-8.
"What is Feature Extraction? Feature Extraction in Image Processing | Great Learning." [Online]. Available: https://www.mygreatlearning.com/blog/feature-extraction-in-image-processing/ (accessed Jul. 01, 2023).
"tf.keras.preprocessing.text.Tokenizer | TensorFlow v2.12.0." [Online]. Available: https://www.tensorflow.org/api docs/python/tf/keras/preprocessing/text/Tokenizer (accessed Jul. 01, 2023).
KDnuggets, "Tokenization," 2020. [Online]. Available: https://www.kdnuggets.com/2020/03/tensorflow-keras-tokenization-text-data-prep.html
"How to Choose a Feature Selection Method For Machine Learning - MachineLearningMastery.com." [Online]. Available: https://machinelearningmastery.com/feature-selection-with-real-and-categorical-data/ (accessed Nov. 19, 2022).
F. O. Catak, A. F. Yazi, O. Elezaj, and J. Ahmed, "Deep learning based Sequential model for malware analysis using Windows exe API Calls," PeerJ Comput. Sci., vol. 6, pp. 1–23, 2020. doi: 10.7717/PEERJ-CS.285.
"ocatak/malware-api-class: Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers." [Online]. Available: https://github.com/ocatak/malware-api-class (accessed Jan. 16, 2024).
APIMDS-dataset - Dropbox." [Online]. Available: https://www.dropbox.com/sh/ppipr0u9v9pu0bg/AAAXR3PdjwcUmA8MRCS7EyXga?dl=0 file-subpath=2Fmalware-dataset preview=malware-dataset.zip (accessed Jan. 16, 2024).
"Malware Detection using DeepLearning | Kaggle." [Online]. Available: https://www.kaggle.com/code/vinesmsuic/malware-detection-using-deeplearning/input (accessed Jan. 20, 2024).
"Malware Detection | Kaggle." [Online]. Available: https://www.kaggle.com/ code/balpars/malware-detection/input (accessed Jan. 20, 2024).
Downloads
Published
How to Cite
Issue
Section
License
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (CC-By) that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
This work is licensed under a Creative Commons Attribution License CC BY
