Loading...
Please wait, while we are loading the content...
Similar Documents
Malware Detection of Hangul Word Processor Files Using Spatial Pyramid Average Pooling
| Content Provider | MDPI |
|---|---|
| Author | Jeong, Young-Seob Woo, Jiyoung Lee, Sangmin Kang, Ah Reum |
| Copyright Year | 2020 |
| Description | Malware detection of non-executables has recently been drawing much attention because ordinary users are vulnerable to such malware. Hangul Word Processor (HWP) is software for editing non-executable text files and is widely used in South Korea. New malware for HWP files continues to appear because of the circumstances between South Korea and North Korea. There have been various studies to solve this problem, but most of them are limited because they require a large amount of effort to define features based on expert knowledge. In this study, we designed a convolutional neural network to detect malware within HWP files. Our proposed model takes a raw byte stream as input and predicts whether it contains malicious actions or not. To incorporate highly variable lengths of HWP byte streams, we propose a new padding method and a spatial pyramid average pooling layer. We experimentally demonstrate that our model is not only effective, but also efficient. |
| Starting Page | 5265 |
| e-ISSN | 14248220 |
| DOI | 10.3390/s20185265 |
| Journal | Sensors |
| Issue Number | 18 |
| Volume Number | 20 |
| Language | English |
| Publisher | MDPI |
| Publisher Date | 2020-09-15 |
| Access Restriction | Open |
| Subject Keyword | Sensors Information and Library Science Malware Detection Hangul Word Processor Hwp Spatial Pyramid Pooling Spatial Pyramid Average Pooling Convolutional Neural Network Stretch Padding |
| Content Type | Text |
| Resource Type | Article |