Malware Analysis Using Visualized Image Matrices
Joint Authors
Han, KyoungSoo
Kang, BooJoong
Im, Eul Gyu
Source
Issue
Vol. 2014, Issue 2014 (31 Dec. 2014), pp.1-15, 15 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2014-07-16
Country of Publication
Egypt
No. of Pages
15
Main Subjects
Medicine
Information Technology and Computer Science
Abstract EN
This paper proposes a novel malware visual analysis method that contains not only a visualization method to convert binary files into images, but also a similarity calculation method between these images.
The proposed method generates RGB-colored pixels on image matrices using the opcode sequences extracted from malware samples and calculates the similarities for the image matrices.
Particularly, our proposed methods are available for packed malware samples by applying them to the execution traces extracted through dynamic analysis.
When the images are generated, we can reduce the overheads by extracting the opcode sequences only from the blocks that include the instructions related to staple behaviors such as functions and application programming interface (API) calls.
In addition, we propose a technique that generates a representative image for each malware family in order to reduce the number of comparisons for the classification of unknown samples and the colored pixel information in the image matrices is used to calculate the similarities between the images.
Our experimental results show that the image matrices of malware can effectively be used to classify malware families both statically and dynamically with accuracy of 0.9896 and 0.9732, respectively.
American Psychological Association (APA)
Han, KyoungSoo& Kang, BooJoong& Im, Eul Gyu. 2014. Malware Analysis Using Visualized Image Matrices. The Scientific World Journal،Vol. 2014, no. 2014, pp.1-15.
https://search.emarefa.net/detail/BIM-1048409
Modern Language Association (MLA)
Han, KyoungSoo…[et al.]. Malware Analysis Using Visualized Image Matrices. The Scientific World Journal No. 2014 (2014), pp.1-15.
https://search.emarefa.net/detail/BIM-1048409
American Medical Association (AMA)
Han, KyoungSoo& Kang, BooJoong& Im, Eul Gyu. Malware Analysis Using Visualized Image Matrices. The Scientific World Journal. 2014. Vol. 2014, no. 2014, pp.1-15.
https://search.emarefa.net/detail/BIM-1048409
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1048409