Malware Classification Method Using API Call Categorization

Abstract

The development of malware and computer security countermeasures is in a continuous arms race. Malware authors will adapt their malware according to the current state of events to maximize their chance of success. This increases the value of rapidly detecting the presence of malware within a system and identifying the type of malware. This research proposes a new method of classifying malware using API call categorization based on markov chain. The proposed methods have demonstrated a moderate accuracy of 87.19% with an f-1 score of 75.18%.