Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework

The cyber realm is overwhelmed with dynamic malware that promptly penetrates all defense mechanisms, operates unapprehended to the user, and covertly causes damage to sensitive data. The current generation of cyber users is being victimized by the interpolation of malware each day due to the pervasi...

Full description

Bibliographic Details
Main Authors: Faiza Babar Khan, Muhammad Hanif Durad, Asifullah Khan, Farrukh Aslam Khan, Muhammad Rizwan, Aftab Ali
Format: Article
Language:English
Published: IEEE 2024-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/10414101/
_version_ 1827340043838029824
author Faiza Babar Khan
Muhammad Hanif Durad
Asifullah Khan
Farrukh Aslam Khan
Muhammad Rizwan
Aftab Ali
author_facet Faiza Babar Khan
Muhammad Hanif Durad
Asifullah Khan
Farrukh Aslam Khan
Muhammad Rizwan
Aftab Ali
author_sort Faiza Babar Khan
collection DOAJ
description The cyber realm is overwhelmed with dynamic malware that promptly penetrates all defense mechanisms, operates unapprehended to the user, and covertly causes damage to sensitive data. The current generation of cyber users is being victimized by the interpolation of malware each day due to the pervasive progression of Internet connectivity. Malware is dispersed to infiltrate the security, privacy, and integrity of the system. Conventional malware detection systems do not have the potential to detect novel malware without the accessibility of their signatures, which gives rise to a high False Negative Rate (FNR). Previously, there were numerous attempts to address the issue of malware detection, but none of them effectively combined the capabilities of signature-based and machine learning-based detection engines. To address this issue, we have developed an integrated Anti-Malware System (AMS) architecture that incorporates both conventional signature-based detection and AI-based detection modules. Our approach employs a Generative Adversarial Network (GAN) based Malware Classifier Optimizer (MCOGAN) framework, which can optimize a malware classifier. This framework utilizes GANs to generate fabricated benign files that can be used to train external discriminators for optimization purposes. We describe our proposed framework and anti-malware system in detail to provide a better understanding of how a malware detection system works. We evaluate our approach using the Figshare dataset and state-of-the-art models as discriminators. Our results showcase enhanced malware detection performance, yielding a 10% performance boost, thus affirming the efficacy of our approach compared to existing models.
first_indexed 2024-03-07T20:11:19Z
format Article
id doaj.art-e167ba0691db425d9d7d75cfc42b3021
institution Directory Open Access Journal
issn 2169-3536
language English
last_indexed 2024-03-07T20:11:19Z
publishDate 2024-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj.art-e167ba0691db425d9d7d75cfc42b30212024-02-28T00:01:12ZengIEEEIEEE Access2169-35362024-01-0112276832770810.1109/ACCESS.2024.335845410414101Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network FrameworkFaiza Babar Khan0https://orcid.org/0000-0002-6751-8360Muhammad Hanif Durad1https://orcid.org/0000-0002-8026-1045Asifullah Khan2https://orcid.org/0000-0003-2039-5305Farrukh Aslam Khan3https://orcid.org/0000-0002-7023-7172Muhammad Rizwan4https://orcid.org/0000-0002-0855-3465Aftab Ali5https://orcid.org/0000-0002-4578-7631Department of Computer and Information Sciences (DCIS), CIPMA Laboratory, Pakistan Institute of Engineering and Applied Sciences (PIEAS), Islamabad, PakistanDepartment of Computer and Information Sciences (DCIS), CIPMA Laboratory, Pakistan Institute of Engineering and Applied Sciences (PIEAS), Islamabad, PakistanDepartment of Computer and Information Sciences (DCIS), Pattern Recognition Laboratory, Pakistan Institute of Engineering and Applied Sciences (PIEAS), Nilore, Islamabad, PakistanPIEAS Artificial Intelligence Center (PAIC), Pakistan Institute of Engineering and Applied Sciences (PIEAS), Nilore, Islamabad, PakistanDepartment of Computer and Information Sciences (DCIS), CIPMA Laboratory, Pakistan Institute of Engineering and Applied Sciences (PIEAS), Islamabad, PakistanSchool of Computing, Ulster University, Belfast, U.KThe cyber realm is overwhelmed with dynamic malware that promptly penetrates all defense mechanisms, operates unapprehended to the user, and covertly causes damage to sensitive data. The current generation of cyber users is being victimized by the interpolation of malware each day due to the pervasive progression of Internet connectivity. Malware is dispersed to infiltrate the security, privacy, and integrity of the system. Conventional malware detection systems do not have the potential to detect novel malware without the accessibility of their signatures, which gives rise to a high False Negative Rate (FNR). Previously, there were numerous attempts to address the issue of malware detection, but none of them effectively combined the capabilities of signature-based and machine learning-based detection engines. To address this issue, we have developed an integrated Anti-Malware System (AMS) architecture that incorporates both conventional signature-based detection and AI-based detection modules. Our approach employs a Generative Adversarial Network (GAN) based Malware Classifier Optimizer (MCOGAN) framework, which can optimize a malware classifier. This framework utilizes GANs to generate fabricated benign files that can be used to train external discriminators for optimization purposes. We describe our proposed framework and anti-malware system in detail to provide a better understanding of how a malware detection system works. We evaluate our approach using the Figshare dataset and state-of-the-art models as discriminators. Our results showcase enhanced malware detection performance, yielding a 10% performance boost, thus affirming the efficacy of our approach compared to existing models.https://ieeexplore.ieee.org/document/10414101/Anti-malware systemgenerative adversarial networksmalware sandboxesmalwareunpackerperformance
spellingShingle Faiza Babar Khan
Muhammad Hanif Durad
Asifullah Khan
Farrukh Aslam Khan
Muhammad Rizwan
Aftab Ali
Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework
IEEE Access
Anti-malware system
generative adversarial networks
malware sandboxes
malware
unpacker
performance
title Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework
title_full Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework
title_fullStr Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework
title_full_unstemmed Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework
title_short Design and Performance Analysis of an Anti-Malware System Based on Generative Adversarial Network Framework
title_sort design and performance analysis of an anti malware system based on generative adversarial network framework
topic Anti-malware system
generative adversarial networks
malware sandboxes
malware
unpacker
performance
url https://ieeexplore.ieee.org/document/10414101/
work_keys_str_mv AT faizababarkhan designandperformanceanalysisofanantimalwaresystembasedongenerativeadversarialnetworkframework
AT muhammadhanifdurad designandperformanceanalysisofanantimalwaresystembasedongenerativeadversarialnetworkframework
AT asifullahkhan designandperformanceanalysisofanantimalwaresystembasedongenerativeadversarialnetworkframework
AT farrukhaslamkhan designandperformanceanalysisofanantimalwaresystembasedongenerativeadversarialnetworkframework
AT muhammadrizwan designandperformanceanalysisofanantimalwaresystembasedongenerativeadversarialnetworkframework
AT aftabali designandperformanceanalysisofanantimalwaresystembasedongenerativeadversarialnetworkframework