• 文献检索
  • 文档翻译
  • 深度研究
  • 学术资讯
  • Suppr Zotero 插件Zotero 插件
  • 邀请有礼
  • 套餐&价格
  • 历史记录
应用&插件
Suppr Zotero 插件Zotero 插件浏览器插件Mac 客户端Windows 客户端微信小程序
定价
高级版会员购买积分包购买API积分包
服务
文献检索文档翻译深度研究API 文档MCP 服务
关于我们
关于 Suppr公司介绍联系我们用户协议隐私条款
关注我们

Suppr 超能文献

核心技术专利:CN118964589B侵权必究
粤ICP备2023148730 号-1Suppr @ 2026

文献检索

告别复杂PubMed语法,用中文像聊天一样搜索,搜遍4000万医学文献。AI智能推荐,让科研检索更轻松。

立即免费搜索

文件翻译

保留排版,准确专业,支持PDF/Word/PPT等文件格式,支持 12+语言互译。

免费翻译文档

深度研究

AI帮你快速写综述,25分钟生成高质量综述,智能提取关键信息,辅助科研写作。

立即免费体验

一种基于高效密集连接网络的恶意软件检测深度学习模型。

An Efficient DenseNet-Based Deep Learning Model for Malware Detection.

作者信息

Hemalatha Jeyaprakash, Roseline S Abijah, Geetha Subbiah, Kadry Seifedine, Damaševičius Robertas

机构信息

Department of Computer Science and Engineering, AAA College of Engineering and Technology, Sivakasi 626123, Tamil Nadu, India.

School of Computer Science and Engineering, Vellore Institute of Technology-Chennai Campus, Vandalur-Kelambakkam Road, Chennai 600127, Tamil Nadu, India.

出版信息

Entropy (Basel). 2021 Mar 15;23(3):344. doi: 10.3390/e23030344.

DOI:10.3390/e23030344
PMID:33804035
原文链接:https://pmc.ncbi.nlm.nih.gov/articles/PMC7998822/
Abstract

Recently, there has been a huge rise in malware growth, which creates a significant security threat to organizations and individuals. Despite the incessant efforts of cybersecurity research to defend against malware threats, malware developers discover new ways to evade these defense techniques. Traditional static and dynamic analysis methods are ineffective in identifying new malware and pose high overhead in terms of memory and time. Typical machine learning approaches that train a classifier based on handcrafted features are also not sufficiently potent against these evasive techniques and require more efforts due to feature-engineering. Recent malware detectors indicate performance degradation due to class imbalance in malware datasets. To resolve these challenges, this work adopts a visualization-based method, where malware binaries are depicted as two-dimensional images and classified by a deep learning model. We propose an efficient malware detection system based on deep learning. The system uses a reweighted class-balanced loss function in the final classification layer of the DenseNet model to achieve significant performance improvements in classifying malware by handling imbalanced data issues. Comprehensive experiments performed on four benchmark malware datasets show that the proposed approach can detect new malware samples with higher accuracy (98.23% for the Malimg dataset, 98.46% for the BIG 2015 dataset, 98.21% for the MaleVis dataset, and 89.48% for the unseen Malicia dataset) and reduced false-positive rates when compared with conventional malware mitigation techniques while maintaining low computational time. The proposed malware detection solution is also reliable and effective against obfuscation attacks.

摘要

最近,恶意软件增长迅猛,这对组织和个人构成了重大安全威胁。尽管网络安全研究一直在不懈努力抵御恶意软件威胁,但恶意软件开发人员仍不断找到新方法来规避这些防御技术。传统的静态和动态分析方法在识别新恶意软件方面效果不佳,且在内存和时间方面开销很大。基于手工制作特征训练分类器的典型机器学习方法在应对这些规避技术时也不够强大,并且由于特征工程需要付出更多努力。最近的恶意软件检测器显示,由于恶意软件数据集的类不平衡,其性能有所下降。为了解决这些挑战,这项工作采用了一种基于可视化的方法,即将恶意软件二进制文件描绘为二维图像,并由深度学习模型进行分类。我们提出了一种基于深度学习的高效恶意软件检测系统。该系统在DenseNet模型的最终分类层中使用重新加权的类平衡损失函数,通过处理数据不平衡问题,在恶意软件分类方面实现了显著的性能提升。在四个基准恶意软件数据集上进行的综合实验表明,与传统的恶意软件缓解技术相比,该方法能够以更高的准确率检测新的恶意软件样本(Malimg数据集为98.23%,BIG 2015数据集为98.46%,MaleVis数据集为98.21%,未见过的Malicia数据集为89.48%),并降低误报率,同时保持较低的计算时间。所提出的恶意软件检测解决方案在应对混淆攻击时也可靠且有效。

https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/0c8bf3d9ebf3/entropy-23-00344-g008.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/87ea0fd0985c/entropy-23-00344-g001.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/23ce11dc265c/entropy-23-00344-g002.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/07586d5814f9/entropy-23-00344-g003.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/17f5208a53f9/entropy-23-00344-g004.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/4665e8a3fa4e/entropy-23-00344-g005.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/f462e8eecd1f/entropy-23-00344-g006.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/bf583a4c9f74/entropy-23-00344-g007.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/0c8bf3d9ebf3/entropy-23-00344-g008.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/87ea0fd0985c/entropy-23-00344-g001.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/23ce11dc265c/entropy-23-00344-g002.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/07586d5814f9/entropy-23-00344-g003.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/17f5208a53f9/entropy-23-00344-g004.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/4665e8a3fa4e/entropy-23-00344-g005.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/f462e8eecd1f/entropy-23-00344-g006.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/bf583a4c9f74/entropy-23-00344-g007.jpg
https://cdn.ncbi.nlm.nih.gov/pmc/blobs/01f8/7998822/0c8bf3d9ebf3/entropy-23-00344-g008.jpg

相似文献

1
An Efficient DenseNet-Based Deep Learning Model for Malware Detection.一种基于高效密集连接网络的恶意软件检测深度学习模型。
Entropy (Basel). 2021 Mar 15;23(3):344. doi: 10.3390/e23030344.
2
Sparse attention with residual pyramidal depthwise separable convolutional based malware detection with optimization mechanism.基于带有优化机制的残差金字塔深度可分离卷积的稀疏注意力恶意软件检测
Sci Rep. 2024 Oct 18;14(1):24414. doi: 10.1038/s41598-024-76193-4.
3
Malicious Code Variant Identification Based on Multiscale Feature Fusion CNNs.基于多尺度特征融合卷积神经网络的恶意代码变体识别。
Comput Intell Neurosci. 2021 Dec 14;2021:1070586. doi: 10.1155/2021/1070586. eCollection 2021.
4
Transfer Learning for Image-Based Malware Detection for IoT.基于图像的物联网恶意软件检测的迁移学习。
Sensors (Basel). 2023 Mar 20;23(6):3253. doi: 10.3390/s23063253.
5
Deep-Hook: A trusted deep learning-based framework for unknown malware detection and classification in Linux cloud environments.深钩:一种基于深度学习的可信框架,用于在 Linux 云环境中检测和分类未知恶意软件。
Neural Netw. 2021 Dec;144:648-685. doi: 10.1016/j.neunet.2021.09.019. Epub 2021 Oct 2.
6
A Novel Detection and Multi-Classification Approach for IoT-Malware Using Random Forest Voting of Fine-Tuning Convolutional Neural Networks.基于卷积神经网络微调随机森林投票的物联网恶意软件新型检测与多分类方法。
Sensors (Basel). 2022 Jun 6;22(11):4302. doi: 10.3390/s22114302.
7
An Efficient CNN-Based Deep Learning Model to Detect Malware Attacks (CNN-DMA) in 5G-IoT Healthcare Applications.基于高效 CNN 的深度学习模型,用于检测 5G-IoT 医疗保健应用中的恶意软件攻击 (CNN-DMA)。
Sensors (Basel). 2021 Sep 23;21(19):6346. doi: 10.3390/s21196346.
8
Deep Feature Extraction and Classification of Android Malware Images.安卓恶意软件图像的深度特征提取与分类。
Sensors (Basel). 2020 Dec 8;20(24):7013. doi: 10.3390/s20247013.
9
Android malware detection method based on highly distinguishable static features and DenseNet.基于高度可区分静态特征和 DenseNet 的安卓恶意软件检测方法。
PLoS One. 2022 Nov 23;17(11):e0276332. doi: 10.1371/journal.pone.0276332. eCollection 2022.
10
Enhancing Cyber-Resilience for Small and Medium-Sized Organizations with Prescriptive Malware Analysis, Detection and Response.通过规范性恶意软件分析、检测和响应增强中小型组织的网络弹性。
Sensors (Basel). 2023 Jul 28;23(15):6757. doi: 10.3390/s23156757.

引用本文的文献

1
A malware detection method with function parameters encoding and function dependency modeling.一种具有函数参数编码和函数依赖建模的恶意软件检测方法。
PeerJ Comput Sci. 2025 Jun 13;11:e2946. doi: 10.7717/peerj-cs.2946. eCollection 2025.
2
Rapid diagnosis of membranous nephropathy based on kidney tissue Raman spectroscopy and deep learning.基于肾脏组织拉曼光谱和深度学习的膜性肾病快速诊断
Sci Rep. 2025 Apr 15;15(1):13038. doi: 10.1038/s41598-025-97351-2.
3
A Survey on ML Techniques for Multi-Platform Malware Detection: Securing PC, Mobile Devices, IoT, and Cloud Environments.

本文引用的文献

1
Deep Feature Extraction and Classification of Android Malware Images.安卓恶意软件图像的深度特征提取与分类。
Sensors (Basel). 2020 Dec 8;20(24):7013. doi: 10.3390/s20247013.
2
Deep learning.深度学习。
Nature. 2015 May 28;521(7553):436-44. doi: 10.1038/nature14539.
3
Malware analysis using visualized image matrices.使用可视化图像矩阵进行恶意软件分析。
多平台恶意软件检测的机器学习技术调查:保护个人电脑、移动设备、物联网和云环境安全
Sensors (Basel). 2025 Feb 13;25(4):1153. doi: 10.3390/s25041153.
4
PAFE: A lightweight visualization-based fast malware classification method.PAFE:一种基于可视化的轻量级快速恶意软件分类方法。
Heliyon. 2024 Aug 8;10(16):e35965. doi: 10.1016/j.heliyon.2024.e35965. eCollection 2024 Aug 30.
5
Deep learning hybridization for improved malware detection in smart Internet of Things.用于智能物联网中改进恶意软件检测的深度学习混合技术。
Sci Rep. 2024 Apr 3;14(1):7838. doi: 10.1038/s41598-024-57864-8.
6
Detection of Android Malware in the Internet of Things through the K-Nearest Neighbor Algorithm.通过K近邻算法检测物联网中的安卓恶意软件。
Sensors (Basel). 2023 Aug 18;23(16):7256. doi: 10.3390/s23167256.
7
Smart Flood Detection with AI and Blockchain Integration in Saudi Arabia Using Drones.沙特阿拉伯利用无人机实现人工智能与区块链集成的智能洪水检测。
Sensors (Basel). 2023 May 28;23(11):5148. doi: 10.3390/s23115148.
8
Efficient Windows malware identification and classification scheme for plant protection information systems.用于植物保护信息系统的高效Windows恶意软件识别与分类方案
Front Plant Sci. 2023 Feb 15;14:1123696. doi: 10.3389/fpls.2023.1123696. eCollection 2023.
9
Memory Visualization-Based Malware Detection Technique.基于记忆可视化的恶意软件检测技术。
Sensors (Basel). 2022 Oct 8;22(19):7611. doi: 10.3390/s22197611.
10
A Novel Detection and Multi-Classification Approach for IoT-Malware Using Random Forest Voting of Fine-Tuning Convolutional Neural Networks.基于卷积神经网络微调随机森林投票的物联网恶意软件新型检测与多分类方法。
Sensors (Basel). 2022 Jun 6;22(11):4302. doi: 10.3390/s22114302.
ScientificWorldJournal. 2014;2014:132713. doi: 10.1155/2014/132713. Epub 2014 Jul 16.