Analyzing the performance of long short-term memory architectures for malware detection models


Avci Ç., Tekinerdogan B., Çatal Ç.

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE, cilt.35, sa.6, ss.1-0, 2023 (SCI-Expanded) identifier identifier

  • Yayın Türü: Makale / Tam Makale
  • Cilt numarası: 35 Sayı: 6
  • Basım Tarihi: 2023
  • Doi Numarası: 10.1002/cpe.7581
  • Dergi Adı: CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE
  • Derginin Tarandığı İndeksler: Science Citation Index Expanded (SCI-EXPANDED), Scopus, Aerospace Database, Applied Science & Technology Source, Communication Abstracts, Compendex, Computer & Applied Sciences, INSPEC, Metadex, zbMATH, Civil Engineering Abstracts
  • Sayfa Sayıları: ss.1-0
  • Orta Doğu Teknik Üniversitesi Adresli: Hayır

Özet

Malicious software forms a threat to many software-intensive systems and as such several malware detection approaches have been introduced, often based on sequential data analysis. Long short-term memory (LSTM) is an artificial recurrent neural network (RNN) architecture that is effective for sequential data analysis, however, no study has yet analyzed the performance of different LSTM architectures for the application of malware detection. In this article, we aim to evaluate and benchmark the performance of LSTM-based malware detection approaches on specific LSTM architectures to provide insight into malware detection. Our method builds LSTM-based malware prediction models and performs experiments using different LSTM architectures including Vanilla LSTM, stacked LSTM, bi-directional LSTM, and CNN-LSTM. We evaluated the performance of each of these architectures and different configurations. Our study, as a contribution, shows that Bidirectional LSTM with hyperparameter optimization is found to be overperforming other selected LSTM architectures. This study shows that different LSTM approaches and architectures are applicable to the malware detection problem. Quality attributes such as efficiency and accuracy, and the software system architecture adopted for the implementation impact the selection of the LSTM approach.