Malware detection using opcodes and machine learning

Malware detection plays and important role in modern digital systems. Protecting against the fast-paced evolving cyber attacks is critical to safeguard sensitive information and preserve the integrity of digital infrastructure. Traditional signature-based detection methods are not effective when det...

Descripción completa

Detalles Bibliográficos
Autores: Alonso García, Martí, Gironès, Andreu, Andreu Gerique, David, Costa Prats, Juan José|||0000-0003-2479-0230, Morancho Llena, Enrique|||0000-0003-2403-8145, Canal Corretger, Ramon|||0000-0003-4542-204X, Otero Calviño, Beatriz|||0000-0002-9194-559X, Di Carlo, Stefano
Tipo de recurso: informe técnico
Fecha de publicación:2024
País:España
Institución:Universitat Politècnica de Catalunya (UPC)
Repositorio:UPCommons. Portal del coneixement obert de la UPC
Idioma:inglés
OAI Identifier:oai:upcommons.upc.edu:2117/408854
Acceso en línea:https://hdl.handle.net/2117/408854
Access Level:acceso abierto
Palabra clave:Computer crimes
Malware (Computer software)
Machine learning
Delictes informàtics
Aprenentatge automàtic
Àrees temàtiques de la UPC::Informàtica::Intel·ligència artificial::Aprenentatge automàtic
Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica
Descripción
Sumario:Malware detection plays and important role in modern digital systems. Protecting against the fast-paced evolving cyber attacks is critical to safeguard sensitive information and preserve the integrity of digital infrastructure. Traditional signature-based detection methods are not effective when detecting new or altered versions of malware, such as polymorphic or metamorphic malware. Machine learning approaches have been proven to be much more effective at detecting such malware. Runtime behavior can be captured using the most fundamental part of a program, its instructions, also referred as the opcodes. This study presents both static and dynamic analysis using opcodes as the main feature for machine learning models.