A GAN-EfficientNet-Based Traceability Method for Malicious Code Variant Families  

作　　者：Li Li Qing Zhang Youran Kong 

机构地区：[1]School of Computer and Control Engineering,Northeast Forestry University,Harbin,150040,China

出　　处：《Computers, Materials & Continua》2024年第7期801-818,共18页计算机、材料和连续体（英文）

基　　金：support this work is the Key Research and Development Program of Heilongjiang Province,specifically Grant Number 2023ZX02C10.

摘　　要：Due to the diversity and unpredictability of changes in malicious code,studying the traceability of variant families remains challenging.In this paper,we propose a GAN-EfficientNetV2-based method for tracing families of malicious code variants.This method leverages the similarity in layouts and textures between images of malicious code variants from the same source and their original family of malicious code images.The method includes a lightweight classifier and a simulator.The classifier utilizes the enhanced EfficientNetV2 to categorize malicious code images and can be easily deployed on mobile,embedded,and other devices.The simulator utilizes an enhanced generative adversarial network to simulate different variants of malicious code and generates datasets to validate the model’s performance.This process helps identify model vulnerabilities and security risks,facilitating model enhancement and development.The classifier achieves 98.61%and 97.59%accuracy on the MMCC dataset and Malevis dataset,respectively.The simulator’s generated image of malicious code variants has an FID value of 155.44 and an IS value of 1.72±0.42.The classifier’s accuracy for tracing the family of malicious code variants is as high as 90.29%,surpassing that of mainstream neural network models.This meets the current demand for high generalization and anti-obfuscation abilities in malicious code classification models due to the rapid evolution of malicious code.

关 键 词：Malicious code variant traceability feature reuse lightweight neural networks code visualization attention mechanism 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]