Malware detection using opcodes and machine learning

Malware detection plays and important role in modern digital systems. Protecting against the fast-paced evolving cyber attacks is critical to safeguard sensitive information and preserve the integrity of digital infrastructure. Traditional signature-based detection methods are not effective when det...

ver descrição completa

Detalhes bibliográficos
Autores: Alonso García, Martí, Gironès, Andreu, Andreu Gerique, David, Costa Prats, Juan José|||0000-0003-2479-0230, Morancho Llena, Enrique|||0000-0003-2403-8145, Canal Corretger, Ramon|||0000-0003-4542-204X, Otero Calviño, Beatriz|||0000-0002-9194-559X, Di Carlo, Stefano
Tipo de documento: relatório científico
Data de publicação:2024
País:España
Recursos:Universitat Politècnica de Catalunya (UPC)
Repositório:UPCommons. Portal del coneixement obert de la UPC
Idioma:inglês
OAI Identifier:oai:upcommons.upc.edu:2117/408854
Acesso em linha:https://hdl.handle.net/2117/408854
Access Level:Acceso aberto
Palavra-chave:Computer crimes
Malware (Computer software)
Machine learning
Delictes informàtics
Aprenentatge automàtic
Àrees temàtiques de la UPC::Informàtica::Intel·ligència artificial::Aprenentatge automàtic
Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica
Descrição
Resumo:Malware detection plays and important role in modern digital systems. Protecting against the fast-paced evolving cyber attacks is critical to safeguard sensitive information and preserve the integrity of digital infrastructure. Traditional signature-based detection methods are not effective when detecting new or altered versions of malware, such as polymorphic or metamorphic malware. Machine learning approaches have been proven to be much more effective at detecting such malware. Runtime behavior can be captured using the most fundamental part of a program, its instructions, also referred as the opcodes. This study presents both static and dynamic analysis using opcodes as the main feature for machine learning models.