Date of Publication
9-10-2021
Document Type
Master's Thesis
Degree Name
Master of Computer Science
Subject Categories
Computer Sciences
College
College of Computer Studies
Department/Unit
Computer Science
Thesis Advisor
Jocelynn Cu
Defense Panel Chair
Macario Cordel II
Defense Panel Member
Jocelynn Cu
Marnel Peradilla
Abstract/Summary
In recent years, the rate of growth of unique Windows malware samples has grown significantly. This rapid growth has made manual inspection of every malware sample an impossible task. One way to minimize this problem is through auto clustering of unknown malware samples into clusters of similar files. Auto clustering done in this way would allow malware researchers to identify large clusters, as well as analyzing entire clusters using only a few representatives of each cluster. Much work has been done in machine learning with regards to the problem of clustering malware samples. However, previous work has mostly focused on clustering into known malware families, or require dynamic features which are prohibitively slow to extract given the amount of new malware samples. This paper proposes training a siamese neural network using engineered static features to generate embeddings that can be used to calculate the distances between malware files. The engineered features would be carefully chosen so that the distances calculated from the resulting embeddings would be resistant to a certain degree of malware metamorphism, as well as generalizing well to Windows files as a whole instead of specific malware families. This would also enable a type of one-shot learning detection, where multiple unknown malware samples can be detected using the distance from a known malicious files.
Abstract Format
html
Language
English
Format
Electronic
Physical Description
97 leaves
Keywords
Malware (Computer software); Neural networks (Computer science); Machine learning
Recommended Citation
Sison, M. T. (2021). Calculating distances between Windows malware using siamese neural network embeddings. Retrieved from https://animorepository.dlsu.edu.ph/etdm_comsci/12
Upload Full Text
wf_yes
Embargo Period
11-15-2021