Can I read Catch them alive: A malware detection approach through memory forensics, manifold learning and computer vision on EtoBox?

Catch them alive: A malware detection approach through memory forensics, manifold learning and computer vision by Ahmet Selman Bozkir; Ersan Tahillioglu; Murat Aydos; Ilker Kara is a Computer Science article available to read on EtoBox.

What is Catch them alive: A malware detection approach through memory forensics, manifold learning and computer vision about?

The everlasting increase in usage of information systems and online services have triggered the birth of the new type of malware which are more dangerous and hard to detect. In particular, according to the recent reports, the new type of fileless malware infect the victims’ devices without a persistent trace (i.e. file) on hard drives. Moreover, existing static malware detection methods in literature often fail to detect sophisticated malware utilizing various obfuscation and encryption techniques. Our contribution in this study is two-folded. First, we present a novel approach to recognize malware by capturing the memory dump of suspicious processes which can be represented as a RGB image. In contrast to the conventional approaches followed by static and dynamic methods existing in the literature, we aimed to obtain and use memory data to reveal visual patterns that can be classified by employing computer vision and machine learning methods in a multi-class open-set recognition regime. And second, we have applied a state of art manifold learning scheme named UMAP to improve the detection of unknown malware files through binary classification. Throughout the study, we have employed

Who reads Catch them alive: A malware detection approach through memory forensics, manifold learning and computer vision?

Author

Ahmet Selman Bozkir; Ersan Tahillioglu; Murat Aydos; Ilker Kara

Publisher

Elsevier BV

Published

2021

Language

EN

Field

Computer Science (Physical Sciences)