Malware Detection and Identification using Multi-View Learning based on Sparse Representation

Hazrati Fard, Seyed Mehdi; Velayati, Elham

doi:10.22133/ijwr.2020.226241.1055

Malware Detection and Identification using Multi-View Learning based on Sparse Representation

Document Type : Original Article

Authors

¹ Ph.D., School of Computer Engineering and Information Technology, Shiraz University, Shiraz, Iran

² Department of Information Technology Sharif University, Tehran, Iran

10.22133/ijwr.2020.226241.1055

Abstract

With the widespread using Internet in any device and services, several homes and workplace applications have been provided to avoid attacks. Connecting a system or device to an insecure network can create the possibility of being infected by unwanted files. Detecting such files is a vital task in any system. Employing machine learning (ML) is the most efficient method to detect these penetrations. On the other hand, malware programmers try to design malicious files that are hard to detect. A file can hide from detection in a feature view, but concealing in all views would be very difficult.
In this paper, inspiring Multi-View Learning (MVL), we proposed to incorporate some various features such as Opcodes, Bytecodes, and System-calls to achieve complementary information to identify a file. In this way, we developed a modified version of Sparse Representation based Classifier (SRC) to aggregate the effect of all modalities in a unified classifier. To show the efficiency of the proposed method, we used several real datasets. Experimental results show the high performance of the proposed approach and its ability to cope with the imbalanced conditions.

Keywords