Malware Classification Based on Multilayer Perception and Word2Vec for IoT Security

• Published in: ACM transactions on Internet technology 2022-02, Vol.22 (1), p.1-22
• Main Authors: Qiao, Yanchen, Zhang, Weizhe, Du, Xiaojiang, Guizani, Mohsen
• Format: Article
• Language: English
• ISSN: 1533-5399; 1557-6051
• DOI: 10.1145/3436751

With the construction of smart cities, the number of Internet of Things (IoT) devices is growing rapidly, leading to an explosive growth of malware designed for IoT devices. These malware pose a serious threat to the security of IoT devices. The traditional malware classification methods mainly rely on feature engineering. To improve accuracy, a large number of different types of features will be extracted from malware files in these methods. That brings a high complexity to the classification. To solve these issues, a malware classification method based on Word2Vec and Multilayer Perception (MLP) is proposed in this article. First, for one malware sample, Word2Vec is used to calculate a word vector for all bytes of the binary file and all instructions in the assembly file. Second, we combine these vectors into a 256x256x2-dimensional matrix. Finally, we designed a deep learning network structure based on MLP to train the model. Then the model is used to classify the testing samples. The experimental results prove that the method has a high accuracy of 99.54%.