Conference proceeding
IoT Malware Data Augmentation using a Generative Adversarial Network
PROCEEDINGS OF THE 57TH ANNUAL HAWAII INTERNATIONAL CONFERENCE ON SYSTEM SCIENCES, pp.7572-7581
01 Jan 2024
Abstract
Behavioral malware detection has been shown to be an effective method for detecting malware running on computing hosts. Machine learning (ML) models are often used for this task, which use representative behavioral data from a device to make a classification as to whether an observation is malware or not. Although these models can perform well, machine learning models in security are often trained on imbalanced training datasets that yield poor real-world efficacy, as they favor the overrepresented class. Thus, we need a way to augment the underrepresented class. Some common data augmentation techniques include SMOTE, data resampling/upsampling, or using generative algorithms. In this work, we explore using generative algorithms for this task, and show how those results compare to results obtained using SMOTE and upsampling. Specifically, we feed the less-represented class of data into a Generative Adversarial Network (GAN) to create enough realistic synthetic data to balance the dataset. In this work, we show how using a GAN to balance a dataset that favors benign data helps a shallow Neural Network achieve a higher Area Under the Receiver Operating Characteristic Curve (AUC) and a lower False Positive Rate (FPR).
Metrics
1 Record Views
Details
- Title
- IoT Malware Data Augmentation using a Generative Adversarial Network
- Creators
- John Carter - Drexel Univ, Dept Comp Sci, Philadelphia, PA 19104 USASpiros Mancoridis - Drexel UniversityPavlos Protopapas - Harvard UniversityErick Galinkin - Drexel Univ, Dept Comp Sci, Philadelphia, PA 19104 USA
- Contributors
- T X Bui (Editor)
- Publication Details
- PROCEEDINGS OF THE 57TH ANNUAL HAWAII INTERNATIONAL CONFERENCE ON SYSTEM SCIENCES, pp.7572-7581
- Series
- Hawaii International Conference on System Sciences
- Publisher
- HICSS
- Number of pages
- 10
- Grant note
- Auerbach Berger Chair of Cybersecurity
- Resource Type
- Conference proceeding
- Language
- English
- Academic Unit
- Computer Science (Computing)
- Identifiers
- 991022040296604721