一个分布式框架,用于零日恶意软件检测,使用联合集体模型
Hassan Ishfaq1, Jamal Hussain Shah1, Rabia Saleem2
1Department of Computer Science, COMSATS University Islamabad, Wah Cantt, Pakistan.
PloS one
|January 7, 2026
概括
本研究介绍了一种堆叠集团联合学习模型,用于先进的零日攻击检测. 这种新的方法提高了恶意软件家族分类的准确性和效率,改善了网络安全防御.
科学领域:
- 网络安全 网络安全
- 机器学习 机器学习
- 恶意软件分析 恶意软件分析
背景情况:
- 零日攻击由于恶意软件的多样性和不平衡的数据集,造成了重大的网络安全挑战.
- 这些攻击的实时检测和分类是复杂的,并且往往不准确.
- 迫切需要智能,适应性防御机制,以提高精度和强度.
研究的目的:
- 为准确的零日攻击分类提出一个堆叠集团联合学习模型.
- 通过精确度感知节点权重方案,解决恶意软件家族之间的类间和类内相似性.
- 为了提高恶意软件检测的概括性和稳定性.
主要方法:
- 恶意软件便携式可执行文件 (PE) 被收集,验证并转换为28个家庭分类的图像格式.
- 使用基于转移学习的微调ResNet-50模型提取了深度特征.
- 一个新的集体堆叠联合模型整合了分布式节点的特征来进行分类.
主要成果:
- 与基线方法相比,拟议的模型显示出更高的准确性和计算效率.
- 联合节点和中央堆叠的独立培训提高了学习率,并减少了过度装配.
- 该模型在私人和公共数据集上实现了强大的分类性能.
结论:
- 堆叠合体联合学习模型为零日攻击检测提供了一个有希望的解决方案.
- 精度意识节点权重方案有效地处理恶意软件分类挑战.
- 该方法提供了增强的概括性和稳定性,优于现有方法.
相关概念视频
Masking and Demasking Agents
3.4K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
3.4K
Steps in Outbreak Investigation
485
In the ever-evolving field of public health, statistical analysis serves as a cornerstone for understanding and managing disease outbreaks. By leveraging various statistical tools, health professionals can predict potential outbreaks, analyze ongoing situations, and devise effective responses to mitigate impact. For that to happen, there are a few possible stages of the analysis:
485
Viruses with RNA Genomes
793
RNA viruses are categorized into positive-strand, negative-strand, or double-stranded groups based on their genomic structure and replication mechanisms. This classification dictates how they exploit host cellular machinery for protein synthesis and replication. Some RNA viruses also utilize reverse transcription as part of their life cycle, further diversifying their replication strategies.Positive-Strand RNA VirusesPositive-strand RNA viruses have genomes that function directly as messenger...
793
