使用预训练的变压器编码器和字节序列的恶意软件检测
Eun-Jin Kim1, Yun-Kyung Lee2, Sang-Min Lee2
1Department of Computer Engineering, Chungbuk National University, Cheongju, Chungcheongbukdo, Republic of Korea.
PloS one
|October 13, 2025
概括
本研究介绍了一种基于变压器的新型语言模型,用于使用字节序列增强恶意软件检测. 我们的模型显著优于卷积神经网络,提高了检测准确度.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 人工智能的人工智能
背景情况:
- 恶意攻击正在不断发展,需要先进的恶意软件检测方法.
- 神经网络,特别是卷积神经网络 (CNN),用于分析文件字节序列.
- 基于变压器的语言模型在各种领域显示出希望,并且可以适应网络安全任务.
研究的目的:
- 引入一种新的基于变压器的语言模型,用于使用文件字节序列检测恶意软件.
- 在这个领域,为变压器模型提出和评估新的预培训策略.
- 为预训练和微调恶意软件检测模型建立一个基准数据集.
主要方法:
- 开发了一个基于变压器的语言模型来处理文件字节序列.
- 引入了两种新的预训策略:真假预测和相同序列预测.
- 探索了预训练策略的组合,包括掩面语言建模和下一个句子的预测.
- 创建了一个基准数据集,包括PDF,HWP和MS Office文件.
主要成果:
- 拟议的基于变压器的语言模型在恶意软件检测方面表现优于CNN.
- 与CNN相比,实现了宏观F1得分改进,从2.7%p到11.1%p不等.
- 经验结果验证了新型预培训策略的有效性.
结论:
- 基于变压器的语言模型为恶意软件检测提供了比CNN更好的方法.
- 开发的模型和预训练策略为未来的恶意软件检测服务提供了坚实的基础.
- 未来的工作重点是开发基于编码器的模型来处理更长的字节序列.
相关概念视频
Types Of Transformers
1.4K
Transformers can provide desired voltages to a circuit by modifying the number of turns in the secondary windings.
If the ratio of the number of turns in the secondary winding to that of the primary winding is greater than one, then the transformer is said to be a step-up transformer. In a step-up transformer, the voltage at the secondary winding is greater than the voltage applied at the primary winding.
However, if this ratio is less than one, the transformer is said to be a step-down...
If the ratio of the number of turns in the secondary winding to that of the primary winding is greater than one, then the transformer is said to be a step-up transformer. In a step-up transformer, the voltage at the secondary winding is greater than the voltage applied at the primary winding.
However, if this ratio is less than one, the transformer is said to be a step-down...
1.4K
Transformers
1.7K
A device that transforms voltages from one value to another using induction is called a transformer. A transformer consists of two separate coils, or windings, wrapped around the same soft iron core. However, they are electrically insulated from each other.
The iron core has a substantial relative permeability. Therefore, the magnetic field lines generated due to the current in one winding are almost entirely confined within the core, such that the same magnetic flux permeates each turn of both...
The iron core has a substantial relative permeability. Therefore, the magnetic field lines generated due to the current in one winding are almost entirely confined within the core, such that the same magnetic flux permeates each turn of both...
1.7K
Transformers in Distribution System
497
Transformers in distribution systems can be broadly categorized into distribution substation transformers and other distribution transformers. They are crucial for stepping down high transmission voltages to levels suitable for distribution and end-user applications.
Distribution substation transformers come in various ratings and typically use mineral oil for insulation and cooling. To prevent moisture and air from entering the oil, some transformers use an inert gas like nitrogen to fill the...
Distribution substation transformers come in various ratings and typically use mineral oil for insulation and cooling. To prevent moisture and air from entering the oil, some transformers use an inert gas like nitrogen to fill the...
497
Force Classification
2.3K
Forces play a crucial role in the study of physics and engineering. They are essential in describing the motion, behavior, and equilibrium of objects in the physical world. Forces can be classified based on their origin, type, and direction of action.
Contact and non-contact forces are two of the most widely used categories of forces. As the name suggests, contact forces require physical contact between two objects to act upon each other. Examples of contact forces include frictional,...
Contact and non-contact forces are two of the most widely used categories of forces. As the name suggests, contact forces require physical contact between two objects to act upon each other. Examples of contact forces include frictional,...
2.3K

