Deep Neural Network-Based Classification of Spyware Populations Using Macroscopic Statistical Attributes of Operation Codes
摘要
This study proposes a method for categorizing populations of malicious softwareMalicious software using an operation code adjacency graphOperation code adjacency graph feature. To extract an operation code sequence and build an operation code adjacency graphOperation code adjacency graph from it, a piece of input software must be deconstructed. Then, a feature vectorFeature vector is built using this graph. To build a model for hazardous software group classification, a deep neural networkDeep neural network is trained utilizing feature vectorsFeature vector from well-known group classifications. The family group of unidentified software samples is categorized using the learned model. The poor accuracy that plagues present techniques for identifying dangerous software is addressed by the suggested strategy.