Open AccessStealthy Malware Detection Based on Deep Neural Network
Author(s) -
Shoupu Lu,
Qingbao Li,
Xinbing Zhu
Publication year - 2020
Publication title -
journal of physics. conference series
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.21
H-Index - 85
eISSN - 1742-6596
pISSN - 1742-6588
DOI - 10.1088/1742-6596/1437/1/012123
Subject(s) - malware , computer science , convolutional neural network , artificial intelligence , process (computing) , artificial neural network , feature (linguistics) , deep learning , machine learning , pattern recognition (psychology) , recurrent neural network , data mining , computer security , linguistics , philosophy , operating system
Network attacks using advanced local hiding technology have not only increased, but also become a serious threat. However, attacks using these technologies can not be detected through traffic detection, and some attacks imitate benign traffic to avoid detection. To solve these problems, a malware process detection method based on process behavior in possibly infected terminals is proposed. In this method, a deep neural network is introduced to classify malware processes. Firstly, the recurrent neural network is trained to extract the characteristics of process behavior. Secondly, training convolutional neural network is used to classify feature images generated by trained RNN features. The experiments results show that this method can effectively extract the features of malicious processes, and the AUC of ROC curve is 0.97 in the best case.