A topic modeling-based approach to executable file malware detection

Waleed Hilal; Connor Wilkinson; Naseem Alsadi; Onur Surucu; Alessandro Giuliano; Stephen A. Gadsden; John Yawney

doi:10.1117/12.2619033

30 May 2022 A topic modeling-based approach to executable file malware detection

Waleed Hilal, Connor Wilkinson, Naseem Alsadi, Onur Surucu, Alessandro Giuliano, Stephen A. Gadsden, John Yawney

Proceedings Volume 12117, Disruptive Technologies in Information Sciences VI; 1211708 (2022) https://doi.org/10.1117/12.2619033
Event: SPIE Defense + Commercial Sensing, 2022, Orlando, Florida, United States

Abstract

Malware is a term that refers to any malicious software used to harm or exploit a device, service, or network. The presence of malware in a system can disrupt operations and the availability of information in networks while also jeopardizing the integrity and confidentiality of such information, which poses a grave issue for sensitive and critical operations. Traditional approaches to malware detection often used by antivirus software are not robust in detecting previously unseen malware. As a result, they can often be circumvented by finding and exploiting vulnerabilities of the detection system. This study involves using natural language processing techniques, considering the recent advancements made in the field in recent years, to analyze the strings present in the executable files of malware. Specifically, we propose a topic modeling-based approach whereby the strings of a malware’s executable file are treated as a language abstraction to extract relevant topics, which can then be used to improve a classifier’s detection performance. Finally, through experiments using a publicly available dataset, the proposed approach is demonstrated to be superior in performance to traditional techniques in its detection ability, specifically in terms of performance measures such as precision and accuracy.

Conference Presentation

Citation Download Citation

Waleed Hilal, Connor Wilkinson, Naseem Alsadi, Onur Surucu, Alessandro Giuliano, Stephen A. Gadsden, and John Yawney "A topic modeling-based approach to executable file malware detection", Proc. SPIE 12117, Disruptive Technologies in Information Sciences VI, 1211708 (30 May 2022); https://doi.org/10.1117/12.2619033

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available