%A Nghi Phu Tran
%A Huy Hoang Le
%A Ngoc Toan Nguyen
%A Dai Tho Nguyen
%A Ngoc Binh Nguyen
%T CFDVex: A Novel Feature Extraction Method for Detecting Cross-Architecture IoT Malware
%X The widespread adoption of Internet of Things (IoT) devices built on different architectures gave rise to the creation and development of multi-architecture malware for mass compromise. Crossarchitecture malware detection plays an important role in detecting malware early on devices using new or strange architectures. Prior knowledge of malware detection on traditional architectures can be inherited for the same task on new and uncommon ones. Basing on CFD and Vex intermediate representation, we propose a feature selection method to detect cross-architecture malware, called CFDVex. Experimental evaluation of the proposed approach on our large IoT dataset achieved good results for cross-architecture malware detection. We only trained a SVM model by Intel 80386 architecture samples, our method could detect the IoT malware for the MIPS architecture samples with 95.72% of accuracy and 2.81% false positive rate.
%C Ha Noi - Ha Long
%D 2019
%P 248-254
%L SisLab3763