Cross-domain malware image classification using unified deep learning and domain adaptation models
摘要
The research aims to tackle the problem of domain shift in malware image classification tasks where there is poor cross-domain generalization among different datasets. Two popular datasets for this task are considered: Malimg (grayscale images, 9,339 images) and Malevis (RGB images, approximately 14,200 images). The proposed method is based on a unified deep learning framework that incorporates Domain-Adversarial Neural Networks (DANN), semi-supervised learning, and a dual-branch Convolutional Neural Network (CNN) to tackle the domain shift problem. The proposed method is evaluated on three publicly available malware families: Agent, Allaple, and Autorun. The experimental results show that although poor cross-domain accuracy is observed for baseline and DANN models (< 30%), the proposed method that incorporates semi-supervised learning and dual-branch CNN significantly improves cross-domain accuracy to 77.98% and 94.67% for Malimg to Malevis and Malevis to Malimg, respectively.