{"title":"基于深度学习的恶意软件可视化","authors":"Zhuojun Ren, Ting Bai","doi":"10.1109/CISP-BMEI53629.2021.9624362","DOIUrl":null,"url":null,"abstract":"In this paper, we propose a new visualization analysis method based on the binary sequence of malware. The method uses SFCs (space filling curves) to visualize malware files and differentiates the displayable characters from non-displayable ones by different colors. This method resolves the problems that other methods cannot orient characters and shield analysis system from the ZipBomb attack risk aroused by huge malware. We randomly selected 7162 Kaspersky malware files and used the deep fusion networks to extract image signatures. Experiments obtained classification accuracy 98.24% and detection accuracy 99.02%.","PeriodicalId":131256,"journal":{"name":"2021 14th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics (CISP-BMEI)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-10-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"Malware Visualization Based on Deep Learning\",\"authors\":\"Zhuojun Ren, Ting Bai\",\"doi\":\"10.1109/CISP-BMEI53629.2021.9624362\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In this paper, we propose a new visualization analysis method based on the binary sequence of malware. The method uses SFCs (space filling curves) to visualize malware files and differentiates the displayable characters from non-displayable ones by different colors. This method resolves the problems that other methods cannot orient characters and shield analysis system from the ZipBomb attack risk aroused by huge malware. We randomly selected 7162 Kaspersky malware files and used the deep fusion networks to extract image signatures. Experiments obtained classification accuracy 98.24% and detection accuracy 99.02%.\",\"PeriodicalId\":131256,\"journal\":{\"name\":\"2021 14th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics (CISP-BMEI)\",\"volume\":\"10 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-10-23\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2021 14th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics (CISP-BMEI)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/CISP-BMEI53629.2021.9624362\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2021 14th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics (CISP-BMEI)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CISP-BMEI53629.2021.9624362","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
In this paper, we propose a new visualization analysis method based on the binary sequence of malware. The method uses SFCs (space filling curves) to visualize malware files and differentiates the displayable characters from non-displayable ones by different colors. This method resolves the problems that other methods cannot orient characters and shield analysis system from the ZipBomb attack risk aroused by huge malware. We randomly selected 7162 Kaspersky malware files and used the deep fusion networks to extract image signatures. Experiments obtained classification accuracy 98.24% and detection accuracy 99.02%.