An Efficient Algorithm to Extract Control Flow-Based Features for IoT Malware Detection. (28th October 2020)

• Record Type: Journal Article
• Authors: Nghi Phu, Tran; Dai Tho, Nguyen; Huy Hoang, Le; Ngoc Toan, Nguyen; Ngoc Binh, Nguyen
• Is Part Of: Computer journal. Volume 64:Number 4(2021)
• Page Start: 599
• Page End: 609
• Publication Date: 2020-10-28
• Subjects: IoT malware detection -- control flow-based features -- dynamic programming -- CFD -- embedded malware; Computers -- Periodicals; 005.1
• DOI: 10.1093/comjnl/bxaa087
• Languages: English
• ISSNs: 0010-4620

Abstract

Abstract: Control flow-based feature extraction method has the ability to detect malicious code with higher accuracy than traditional text-based methods. Unfortunately, this method has been encountered with the NP-hard problem, which is infeasible for the large-sized and high-complexity programs. To tackle this, we propose a control flow-based feature extraction dynamic programming algorithm for fast extraction of control flow-based features with polynomial time O($N^{2}$ ), where N is the number of basic blocks in decompiled executable codes. From the experimental results, it is demonstrated that the proposed algorithm is more efficient and effective in detecting malware than the existing ones. Applying our algorithm to an Internet of Things dataset gives better results on three measures: Accuracy = 99.05%, False Positive Rate = 1.31% and False Negative Rate = 0.66%.