Convolution neural network with batch normalization and inception-residual modules for Android malware classification

Abstract

Deep learning technology is changing the landscape of cybersecurity research, especially the study of large amounts of data. With the rapid growth in the number of malware, developing of an efficient and reliable method for classifying malware has become one of the research priorities. In this paper, a new method, BIR-CNN, is proposed to classify of Android malware. It combines convolution neural network (CNN) with batch normalization and inception-residual (BIR) network modules by using 347-dim network traffic features. CNN combines inception-residual modules with a convolution layer that can enhance the learning ability of the model. Batch Normalization can speed up the training process and avoid over-fitting of the model. Finally, experiments are conducted on the publicly available network traffic dataset CICAndMal2017 and compared with three traditional machine learning algorithms and CNN. The accuracy of BIR-CNN is 99.73% in binary classification (2-classifier). Moreover, the BIR-CNN can classify malware by its category (4-classifier) and malicious family (35-classifier), with a classification accuracy of 99.53% and 94.38%, respectively. The experimental results show that the proposed model is an effective method for Android malware classification, especially in malware category and family classifier.

Deep Neural Network Regression‐Assisted Pressure Sensor for Decoupling Thermal Variations at Different Operating Temperatures

“…[41] In terms of deep learning model training, overfitting, which increases errors through overlearning of the training dataset, is emerging as a severe issue. [42,43] To date, several methods (i.e., such as dropout, [44,45] batch normalization, [46,47] and early stopping [48,49] ) have been introduced to address the overfitting issue in regression model training. The dropout method was used to prevent the overfitting problem in this study.…”

Characteristic analysis of epileptic brain network based on attention mechanism

“…In the face of such multidimensional samples, traditional classi ers, such as support vector machines, cannot be directly used for classi cation. As the most advanced theory in machine learning, deep learning [28][29][30][31] has received extensive and continuous attention. Speci cally, deep learning is an end-to-end learning framework that can extract deeper internal representations from the input itself [32][33][34][35] .…”