Image‐based malware classification using VGG19 network and spatial convolutional attention

• Main Authors: Awan, Mazhar Javed, Masood, Osama Ahmed, Mohammed, Mazin Abed, Yasin, Awais, Mohd. Zain, Azlan, Damasevicius, Robertas, Abdulkareem, Karrar Hameed
• Format: Article
• Language: English
• Published: MDPI 2021
• Subjects: QA75 Electronic computers. Computer science; T58.5-58.64 Information technology
• Online Access: http://eprints.utm.my/id/eprint/94493/1/AzlanMohdZain2021_ImageBasedMalwareClassification.pdf; http://eprints.utm.my/id/eprint/94493/; http://dx.doi.org/10.3390/electronics10192444
• Institution: Universiti Teknologi Malaysia

In recent years the amount of malware spreading through the internet and infecting computers and other communication devices has tremendously increased. To date, countless techniques and methodologies have been proposed to detect and neutralize these malicious agents. However, as new and automated malware generation techniques emerge, a lot of malware continues to be produced, which can bypass some state‐of‐the‐art malware detection methods. Therefore, there is a need for the classification and detection of these adversarial agents that can compromise the security of people, organizations, and countless other forms of digital assets. In this paper, we propose a spatial attention and convolutional neural network (SACNN) based on deep learning framework for image‐based classification of 25 well‐known malware families with and without class balancing. Performance was evaluated on the Malimg benchmark dataset using precision, recall, specificity, precision, and F1 score on which our proposed model with class balancing reached 97.42%, 97.95%, 97.33%, 97.11%, and 97.32%. We also conducted experiments on SACNN with class balancing on benign class, also produced above 97%. The results indicate that our proposed model can be used for image‐based malware detection with high performance, despite being simpler as compared to other available solutions.