Search papers, labs, and topics across Lattice.
This paper introduces HilEnT, a novel malware detection method that transforms malware binaries into images using a combination of Hilbert curve-based transformation and entropy feature comparison. By generating three-channel colored images from grayscale representations, the authors employ machine learning techniques for both binary and multiclass classification, achieving state-of-the-art results across four diverse datasets. Additionally, the study explores few-shot learning and feature reduction techniques to enhance performance in scenarios with limited sample sizes, demonstrating the robustness and efficiency of the proposed approach.
Transforming malware binaries into images using Hilbert curves and entropy features leads to state-of-the-art detection performance, even in few-shot learning scenarios.
With the increasing threat of malware across various software related domains, malware detection and classification is critical to determine the response actions. Different strategies have been adopted to address the challenge of malware detection. With the advent of deep learning techniques, malware detection using image processing has garnered research attention. In this work, we proposed a novel malware binary to image transformation technique HilEnT based on a combination of Hilbert curve-based transformation of malware binary and the entropy feature comparison of malware file with benign and malware classes. Three grayscale images produced during this process are combined to form a three-channel colored image which is then used for malware detection using machine learning techniques. We performed supervised binary and multiclass classification to evaluate the effectiveness of our proposed HilEnT. We also evaluated a few-shot learning technique to assess the robustness of our proposed HilEnT in a practical setting where the number of available class samples is limited. Furthermore, we investigated the benefits of combination of Histogram of Oriented Gradients and Principal Component Analysis for time performance improvements through feature reduction techniques. We evaluated our proposed methodology on four datasets: Dike, Michael Lester Dataset, Microsoft BIG 2015 and a self-collected dataset, and achieved the state-of-the-art results.
