We perform static analysis of malware programs in the BIG 2015 dataset, a repository containing nine different families of malware programs. Our main goal is to provide a framework for classification of the programs in the dataset. Our analysis of the programs is static in the sense that the contents of the said programs are looked at and their representations are constructed without executing the programs. More precisely, assembly language opcodes are extracted from the programs in the dataset and concatenated in order to construct documents representing these programs. Opcodes being words, we then employ Natural Language Processing tools and techniques for analysis of the documents. Mainly, the Latent Dirichlet Allocation (LDA) algorithm is used to model documents as weighted mixtures of a fixed number of topics. A topic is a collection of words grouped together for their ability to capture meaningful attributes about the documents. We note that the weight distribution of topics within documents of the same family (visually) shows a common pattern that seemingly varies from one family to another. This, therefore, aids in justifying the use of the LDA technique as a feature extraction method, with the features here being the weights of the topics representing each and every document. Ensuing, after training a fine k-nearest neighbors classifier, which takes topic weights as inputs, testing results show a 97.2% classification accuracy, thereby attesting to the efficacy of the overall approach.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Static Analysis through Topic Modeling and its Application to Malware Programs Classification




    Publication date :

    2019-07-01


    Size :

    4215707 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Context-Aware Malware Detection Using Topic Modeling

    Stegner, Wayne / Kapp, David / Kebede, Temesguen et al. | IEEE | 2021



    Convolutional Neural Networks as Classification Tools and Feature Extractors for Distinguishing Malware Programs

    Priyamvada Davuluru, Venkata Salini / Narayanan Narayanan, Barath / Balster, Eric J. | IEEE | 2019


    Interpreting the Smart City Through Topic Modeling

    Zheng, Zhibin / Sieber, Renée E. | Springer Verlag | 2023


    Experiments on Recognition of Malware Based on Static Opcode Occurrence Distribution

    Carlson, Jacob / Ralescu, Anca / Kebede, Temesgen et al. | IEEE | 2023