| 摘要: |
| 针对当前恶意代码静态分析方法精度不足的问题，将恶意代码映射为无压缩的灰度图像，然后根据图像变换方法将图像变换为恒定大小的图像，使用方向梯度直方图提取图像的特征，最后提出一种基于深度森林的恶意代码分类方法.实验中选择不同家族的多个恶意代码样本进行分类，验证了该方法的有效性，并且实验结果优于近期提出的SPAM-GIST方法. |
| 关键词: 恶意代码分类 方向梯度直方图 深度森林 |
| DOI：10.13328/j.cnki.jos.005660 |
| 分类号:TP311 |
| 基金项目:西北工业大学研究生创意创新种子基金（ZZ2018020）；国家重点基础研究发展计划（973）（2013CB329104）；通信网信息传输与分发技术国家重点实验室基金 |
|
| Malicious Code Classification Method Based on Deep Forest |
|
LU Xi-Dong1, DUAN Zhe-Min1, QIAN Ye-Kui2, ZHOU Wei1
|
|
1.School of Electronics and Information, Northwestern Polytechnical University, Xi'an 710072, China;2.Zhengzhou Campus, PLA Army Artillery Air Defense Academy, Zhengzhou 450052, China
|
| Abstract: |
| Aiming at the problem of insufficient accuracy of current static classification method of malicious code, this study maps the malicious code into uncompressed gray-scale image. Then the image is transformed into a constant-size image according to the image transformation method, and the direction gradient histogram is used to extract the features of the image. Finally, a kind of malicious code classification method based on deep forest is proposed. Experiments on malicious code samples from different families verify the effectiveness of the proposed method and the results are superior to the recently proposed SPAM-GIST method. |
| Key words: malicious code classification histogram of oriented gradient deep forest |
