Mobile QR Code QR CODE : The Transactions P of the Korean Institute of Electrical Engineers
The Transactions P of the Korean Institute of Electrical Engineers

Korean Journal of Air-Conditioning and Refrigeration Engineering

ISO Journal TitleTrans. P of KIEE
  • Indexed by
    Korea Citation Index(KCI)
Title A Study on Malware Detection System Using Static Analysis and Stacking
Authors 조진영(Jin-Young Cho) ; 고은기(Eun-Gi Ko) ; 유혜빈(Hye-Bin Yoo) ; 조미리(Mi-Ri Cho) ; 서창진(Chang-Jin Seo)
DOI https://doi.org/10.5370/KIEEP.2020.69.3.187
Page pp.187-192
ISSN 1229-800X
Keywords Detection; Malware; Benign; Static Analysis; PE header; Machine Learning; Stacking model
Abstract The Fourth Industrial Revolution, the introduction of ICT technology, expanded throughout society, increases daily convenience and industrial productivity. But along with the advancing technology, new malicious program threats have also continued to surge. This study proposes a malware detection method using static analysis and stacking techniques to detect new malware as fast and accurately. And we used PE header features, which are extracted through static analysis to process malware without executing it actually. The pe_packer feature was the most efficient in the experiment due to processing the extracted data in various ways and applying it to the machine learning model. So we selected as the feature data to be used to the stacking model. The detection model is implemented based on the stacking technique rather than a single model to detect with high accuracy. The proposed system can classify malware or normal files with fast and accurately. And It has a 94.7 percent detection rate and is better than the existing single model-based detection system.