物联网中融合网络流量的恶意软件检测

Network Traffic-Oriented Malware Detection in IoT

  • 摘要: 针对物联网基础设施、应用程序和终端设备的攻击显著增加,物联网中的代表性恶意软件以产生恶意流量为主。对基于恶意软件字节序列构建的MalConv模型进行改进,与基于恶意流量特征的Bi-LSTM模型进行融合,实现了适用于物联网终端设备恶意软件检测的融合模型。实验结果表明,融合模型NT-MalConv 具有更高的检测能力,检测准确率达95.17%;检测融合对抗样本时,NT-MalConv模型比MalConv改进模型的准确率提升了10.31%。

     

    Abstract: Attacks against IoT (Internet-of-Things) infrastructure, applications and end devices have increased significantly. Typical malware in IoT generates a high volume of malicious traffic. Thus, this paper improves the malware byte sequence-based MalConv model. A malicious traffic feature-based Bi-LSTM (Bidirectional Long Short-Term Memory) model is integrated. Finally, we design a fused malware detection model applicable for end devices in IoT. The experiment results demonstrate that the fused Network Traffic-based MalConv (NT-MalConv) achieves higher detection performance with 95.17% accuracy. NT-MalConv outperforms the improved MalConv and is 10.31% better in accuracy when detecting adversarial samples.

     

/

返回文章
返回