2019/12/20 by Aykut Çayır, Çayır, Aykut, Uğur Ünal +3 · 1 citation
Computer Science · Mathematics · #Advanced Malware Detection Techniques #Anomaly Detection Techniques and Applications #Computer Vision and Pattern Recognition (cs.CV) #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Machine Learning (cs.LG) #Machine Learning (stat.ML) #Network Security and Intrusion Detection #cs.CR #cs.CV #cs.LG #stat.ML
paper · pdf · doi:10.48550/arxiv.1912.10836
30 pages, 10 figures, typos are corrected, references are added
openalex publication_date 2019/12/20 · arxiv created 2020/08/23 · arxiv updated 2020/08/25 · openalex created_date 2022/07/26 · openalex updated_date 2026/07/28
Behavior of a malware varies with respect to malware types. Therefore,knowing type of a malware affects strategies of system protection softwares. Many malware type classification models empowered by machine and deep learning achieve superior accuracies to predict malware types.Machine learning based models need to do heavy feature engineering and feature engineering is dominantly effecting performance of models.On the other hand, deep learning based models require less feature engineering than machine learning based models. However, traditional deep learning architectures and components cause very complex and data sensitive models. Capsule network architecture minimizes this complexity and data sensitivity unlike classical convolutional neural network architectures. This paper proposes an ensemble capsule network model based on bootstrap aggregating technique. The proposed method are tested on two malware datasets, whose the-state-of-the-art results are well-known.