A malware propagation prediction model based on representation learning and graph convolutional networks  

作　　者：Tun Li Yanbing Liu Qilie Liu Wei Xu Yunpeng Xiao Hong Liu 

机构地区：[1]College of Computer Science and Technology,Chongqing University of Posts and Telecommunications,Chongqing,400065,China

出　　处：《Digital Communications and Networks》2023年第5期1090-1100,共11页数字通信与网络（英文版）

基　　金：This research is partially supported by the National Natural Science Foundation of China(Grant No.61772098);Chongqing Technology Innovation and Application Development Project(Grant No.cstc2020jscxmsxmX0150);Chongqing Science and Technology Innovation Leading Talent Support Program(CSTCCXLJRC201908);Basic and Advanced Research Projects of CSTC(No.cstc2019jcyj-zdxmX0008);Science and Technology Research Program of Chongqing Municipal Education Commission(Grant No.KJZD-K201900605).

摘　　要：The traditional malware research is mainly based on its recognition and detection as a breakthrough point,without focusing on its propagation trends or predicting the subsequently infected nodes.The complexity of network structure,diversity of network nodes,and sparsity of data all pose difficulties in predicting propagation.This paper proposes a malware propagation prediction model based on representation learning and Graph Convolutional Networks(GCN)to address the aforementioned problems.First,to solve the problem of the inaccuracy of infection intensity calculation caused by the sparsity of node interaction behavior data in the malware propagation network,a mechanism based on a tensor to mine the infection intensity among nodes is proposed to retain the network structure information.The influence of the relationship between nodes on the infection intensity is also analyzed.Second,given the diversity and complexity of the content and structure of infected and normal nodes in the network,considering the advantages of representation learning in data feature extraction,the corresponding representation learning method is adopted for the characteristics of infection intensity among nodes.This can efficiently calculate the relationship between entities and relationships in low dimensional space to achieve the goal of low dimensional,dense,and real-valued representation learning for the characteristics of propagation spatial data.We also design a new method,Tensor2vec,to learn the potential structural features of malware propagation.Finally,considering the convolution ability of GCN for non-Euclidean data,we propose a dynamic prediction model of malware propagation based on representation learning and GCN to solve the time effectiveness problem of the malware propagation carrier.The experimental results show that the proposed model can effectively predict the behaviors of the nodes in the network and discover the influence of different characteristics of nodes on the malware propagation situation.

关 键 词：MALWARE Representation learning Graph convolutional networks(GCN) Tensor decomposition Propagation prediction 

分 类 号：TN91[电子电信—通信与信息系统]