Visual fileless malware classification via few-shot learning

Liyan Jiang; Yu Zhang; Yuanquan Shi

doi:10.1117/12.2681579

1 June 2023 Visual fileless malware classification via few-shot learning

Liyan Jiang, Yu Zhang, Yuanquan Shi

Proceedings Volume 12718, International Conference on Cyber Security, Artificial Intelligence, and Digital Economy (CSAIDE 2023); 127180I (2023) https://doi.org/10.1117/12.2681579
Event: International Conference on Cyber Security, Artificial Intelligence, and Digital Economy (CSAIDE 2023), 2023, Nanjing, China

Abstract

The use of fileless technologies in malware continues to grow and fileless malware becomes more dangerous and difficult to detect. To address this challenge, we propose a novel visual method for classifying fileless malware based on few-shot learning. First, we built a fileless malware dataset, which is executed through a local virtual environment to collect malware memory dumps. Secondly, memory dumps are clipped and visualized. We developed a new memory dumps trimming method and a novel binary file visualization technique, which can remove redundant data from memory dumps, significantly compress the file size, and then represent the trimmed memory dumps as RGB images. Finally, we propose a few-shot learning framework, namely MMEL (MAML + Mean_subtraction + Euclidean_normalization + Label_Smothing), to improve the performance of the classification method. Experimental results show that our visualization technique and framework outperform other state-of-the-art few-shot learning methods.

Citation Download Citation

Liyan Jiang, Yu Zhang, and Yuanquan Shi "Visual fileless malware classification via few-shot learning", Proc. SPIE 12718, International Conference on Cyber Security, Artificial Intelligence, and Digital Economy (CSAIDE 2023), 127180I (1 June 2023); https://doi.org/10.1117/12.2681579

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available