From malware samples to fractal images: A new paradigm for classification

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F61989100%3A27240%2F24%3A10254672" target="_blank" >RIV/61989100:27240/24:10254672 - isvavai.cz</a>

Alternative codes found

RIV/61989100:27740/24:10254672

Result on the web

<a href="https://www.sciencedirect.com/science/article/pii/S0378475423004937" target="_blank" >https://www.sciencedirect.com/science/article/pii/S0378475423004937</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1016/j.matcom.2023.11.032" target="_blank" >10.1016/j.matcom.2023.11.032</a>

Result language

angličtina

Original language name

From malware samples to fractal images: A new paradigm for classification

Original language description

To date, a large number of research papers have been written on malware classification, identification, classification into different families, and the distinction between malware and goodware. These works have been based on captured malware samples and have attempted to analyse malware and goodware using various techniques like the analysis of malware using malware visualization. These works usually convert malware samples capturing the malware structure into image structures which are then subject to image processing. In this paper, we propose an unconventional and novel approach to malware visualization based on its dynamical analysis, subsequent complex network conversion and fractal geometry, e.g. Julia sets visualization. Very interesting images being subsequently used to classify as malware and goodware. The classification is done by deep learning network. The results of the presented experiments of fractal conversion and subsequent classification are based on a database of 6,589,997 goodware, 827,853 potentially unwanted applications and 4,174,203 malware samples provided by ESET.1 This paper aims to show a new direction in visualizing malware using fractal geometry and possibilities in analysis and classification.

Czech name

—

Czech description

—

Type

J_imp - Article in a specialist periodical, which is included in the Web of Science database

CEP classification

—

OECD FORD branch

10200 - Computer and information sciences

Project

—

Continuities

S - Specificky vyzkum na vysokych skolach

Publication year

2024

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Name of the periodical

Mathematics and computers in simulation

ISSN

0378-4754

e-ISSN

1872-7166

Volume of the periodical

218

Issue of the periodical within the volume

4

Country of publishing house

US - UNITED STATES

Number of pages

30

Pages from-to

174-203

UT code for WoS article

001126383400001

EID of the result in the Scopus database

—