Malware Detection on Byte Streams of Hangul Word Processor Files
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Jeong, Young-Seob | - |
dc.contributor.author | Woo, Jiyoung | - |
dc.contributor.author | Kang, Ah Reum | - |
dc.date.accessioned | 2021-08-11T08:44:12Z | - |
dc.date.available | 2021-08-11T08:44:12Z | - |
dc.date.issued | 2019-12 | - |
dc.identifier.issn | 2076-3417 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/sch/handle/2021.sw.sch/3823 | - |
dc.description.abstract | While the exchange of data files or programs on the Internet grows exponentially, most users are vulnerable to infected files, especially to malicious non-executables. Due to the circumstances between South and North Korea, many malicious actions have recently been found in Hangul Word Processor (HWP) non-executable files because the HWP is widely used in schools, military facilities, and government institutions of South Korea. The HWP file usually has one or more byte streams that are often used for the malicious actions. Based on an assumption that infected byte streams have particular patterns, we design a convolutional neural network (CNN) to grasp such patterns. We conduct experiments on our prepared 534 HWP files, and demonstrate that the proposed CNN achieves the best performance compared to other machine learning models. As new malicious attacks keep emerging, we will keep collecting such HWP files and investigate better model structures. | - |
dc.language | 영어 | - |
dc.language.iso | ENG | - |
dc.publisher | MDPI | - |
dc.title | Malware Detection on Byte Streams of Hangul Word Processor Files | - |
dc.type | Article | - |
dc.publisher.location | 스위스 | - |
dc.identifier.doi | 10.3390/app9235178 | - |
dc.identifier.scopusid | 2-s2.0-85076694812 | - |
dc.identifier.wosid | 000509476600200 | - |
dc.identifier.bibliographicCitation | Applied Sciences-basel, v.9, no.23 | - |
dc.citation.title | Applied Sciences-basel | - |
dc.citation.volume | 9 | - |
dc.citation.number | 23 | - |
dc.type.docType | Article | - |
dc.description.isOpenAccess | Y | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Chemistry | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalResearchArea | Materials Science | - |
dc.relation.journalResearchArea | Physics | - |
dc.relation.journalWebOfScienceCategory | Chemistry, Multidisciplinary | - |
dc.relation.journalWebOfScienceCategory | Engineering, Multidisciplinary | - |
dc.relation.journalWebOfScienceCategory | Materials Science, Multidisciplinary | - |
dc.relation.journalWebOfScienceCategory | Physics, Applied | - |
dc.subject.keywordAuthor | malware detection | - |
dc.subject.keywordAuthor | HWP file | - |
dc.subject.keywordAuthor | byte stream | - |
dc.subject.keywordAuthor | convolutional neural network | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(31538) 22, Soonchunhyang-ro, Asan-si, Chungcheongnam-do, Republic of Korea+82-41-530-1114
COPYRIGHT 2021 by SOONCHUNHYANG UNIVERSITY ALL RIGHTS RESERVED.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.