Optimum parameter machine learning classification and prediction of Internet of Things (IoT) malwares using static malware analysis techniques

Shaukat, SU

Abstract

Application of machine learning in the field of malware analysis is not a new concept, there have been lots of researches done on the classification of malware in android and windows environments. However, when it comes to malware analysis in the internet of things (IoT), it still requires work to be done. IoT was not designed to keeping security/privacy under consideration. Therefore, this area is full of research challenges. This study seeks to evaluate important machine learning classifiers like Support Vector Machines, Neural Network, Random Forest, Decision Trees, Naive Bayes, Bayesian Network, etc. and proposes a framework to utilize static feature extraction and selection processes highlight issues like over-fitting and generalization of classifiers to get an optimized algorithm with better performance. For background study, we used systematic literature review to find out research gaps in IoT, presented malware as a big challenge for IoT and the reasons for applying malware analysis targeting IoT devices and finally perform classification on malware dataset. The classification process used was applied on three different datasets containing file header, program header and section headers as features. Preliminary results show the accuracy of over 90% on file header, program header, and section headers. The scope of this document just discusses these results as initial results and still require some issues to be addressed which may effect on the performance measures.

Citation

Shaukat, S. (in press). Optimum parameter machine learning classification and prediction of Internet of Things (IoT) malwares using static malware analysis techniques. (Dissertation). University of Salford

• Thesis Type: Dissertation
• Acceptance Date: Jan 31, 2019
• Deposit Date: Feb 11, 2019
• Publicly Available Date: Mar 11, 2019