DeepAI AI Chat
Log In Sign Up

Malware Detection for Forensic Memory Using Deep Recurrent Neural Networks

by   Dr Ioannis Karamitsos, et al.

Memory forensics is a young but fast-growing area of research and a promising one for the field of computer forensics. The learned model is proposed to reside in an isolated core with strict communication restrictions to achieve incorruptibility as well as efficiency, therefore providing a probabilistic memory- level view of the system that is consistent with the user-level view. The lower level memory blocks are constructed using primary block sequences of varying sizes that are fed as input into Long-Short Term Memory (LSTM) models. Four configurations of the LSTM model are explored by adding bidirectionality as well as attention. Assembly level data from 50 Windows portable executable (PE) files are extracted, and basic blocks are constructed using the IDA Disassembler toolkit. The results show that longer primary block sequences result in richer LSTM hidden layer representations. The hidden states are fed as features into Max pooling layers or Attention layers, depending on the configuration being tested, and the final classification is performed using Logistic Regression with a single hidden layer. The bidirectional LSTM with Attention proved to be the best model, used on basic block sequences of size 29. The differences between the model’s ROC curves indicate a strong reliance on the lower level, instructional features, as opposed to metadata or string features.


Cell-aware Stacked LSTMs for Modeling Sentences

We propose a method of stacking multiple long short-term memory (LSTM) l...

An Ensemble 1D-CNN-LSTM-GRU Model with Data Augmentation for Speech Emotion Recognition

In this paper, we propose an ensemble of deep neural networks along with...

BumbleBee: A Transformer for Music

We will introduce BumbleBee, a transformer model that will generate MIDI...

Sleep Arousal Detection from Polysomnography using the Scattering Transform and Recurrent Neural Networks

Sleep disorders are implicated in a growing number of health problems. I...

Wider and Deeper, Cheaper and Faster: Tensorized LSTMs for Sequence Learning

Long Short-Term Memory (LSTM) is a popular approach to boosting the abil...

Big Data Application for Network Level Travel Time Prediction

Travel time is essential in advanced traveler information systems (ATIS)...

Detecting Violence in Video Based on Deep Features Fusion Technique

With the rapid growth of surveillance cameras in many public places to m...