Robust Malware Detection using Residual Attention Network

Abstract

Recent advancements in Cyber Security has amalgamated the strengths of Artificial Intelligence and Human Intelligence for Intrusion Detection. The colossal increase in the volume of new malwares generated everyday and the constant risk of zero day attacks demand research for a robust malware detection system. Significant research has gone into exploring the use of Machine Learning and Convolutional Neural Networks. However, to cater to the complexity of such a data-intensive environment generalizability of malware detection becomes the key to creating a successful anti-malware system. There has been a transition from using Malware byte information for Machine Learning and Deep Learning based methods to using an Image based Intrusion Detection system for better assessment of the malware file. Though using Convolutional Neural Networks(CNNs) have helped in capturing local features, Attention based mechanisms play a vital role in detecting polymorphic malware. Hence, in this paper, we explore the use of an attention based mechanism known as Residual Attention for malware detection and compare this with existing CNN based methods and conventional Machine Learning algorithms with the help of GIST features. The proposed method outperformed traditional malware detection methods which use Machine Learning and CNN based Deep Learning algorithms, by demonstrating an accuracy of 99.25%.

An Insight into the Machine-Learning-Based Fileless Malware Detection

“…Currently, malware is using sophisticated approaches for cyber attacks and advances its attacking techniques from file-based to fileless attacks to bypass the existing solutions for malware detection [ 13 ]. These existing solutions [ 14 , 15 ] can easily detect file-based malware attacks on windows [ 16 ], Android [ 17 , 18 ], and IoT devices [ 19 ], but fail to detect the fileless malware. This section presents the literature review, and comparative analysis of machine learning approaches limited to fileless malware.…”