Image visualization based malware detection

Kesav Kancherla, Srinivas Mukkamala

2013 · 151 citations · 11 references

Concepts

TL;DR

Malware detection is a challenging task in cybersecurity, intensified by code obfuscation, metamorphic malware, packers, and zero‑day attacks. The paper proposes a visualization‑based approach for malware detection. The method converts executables into gray‑scale byteplot images, extracts intensity and texture features, and applies computationally intelligent techniques for detection. Using SVMs, the approach achieved 95 % accuracy on a dataset of 25,000 malware and 12,000 benign samples.

Abstract

Malware detection is one of the challenging tasks in Cyber security. The advent of code obfuscation, metamorphic malware, packers and zero day attacks has made malware detection a challenging task. In this paper we present a visualization based approach for malware detection. First the executable is converted to a gray-scale image called byteplot. Later we extract low level features like intensity based and texture based features. We apply computationally intelligent techniques for malware detection using these features. In this work we used Support Vector Machines (SVMs) and obtained an accuracy of 95% on a dataset containing 25000 malware and 12000 benign samples.

References

11