Interaction between devices, people, and the Internet has given birth to a new digital communication model, the Internet of Things (IoT). The seamless network of these smart devices is the core of this IoT model. However, on the other hand, integrating smart devices to constitute a network introduces many security challenges. These connected devices have created a security blind spot, where cybercriminals can easily launch an attack to compromise the devices using malware proliferation techniques. Therefore, malware detection is considered a lifeline for the survival of IoT devices against cyberattacks. This study proposes a novel IoT Malware Detection Architecture (iMDA) using squeezing and boosting dilated convolutional neural network (CNN). The proposed architecture exploits the concepts of edge and smoothing, multi-path dilated convolutional operations, channel squeezing, and boosting in CNN. Edge and smoothing operations are employed with split-transform-merge (STM) blocks to extract local structure and minor contrast variation in the malware images. STM blocks performed multi-path dilated convolutional operations, which helped recognize the global structure of malware patterns. Additionally, channel squeezing and merging helped to get the prominent reduced and diverse feature maps, respectively. Channel squeezing and boosting are applied with the help of STM block at the initial, middle and final levels to capture the texture variation along with the depth for the sake of malware pattern hunting. The proposed architecture has shown substantial performance compared with the customized CNN models. The proposed iMDA has achieved Accuracy: 97.93%, F1-Score: 0.9394, Precision: 0.9864, MCC: 0. 8796, Recall: 0.8873, AUC-PR: 0.9689 and AUC-ROC: 0.9938.
翻译:设备、 人和互联网之间的相互作用, 产生了一个新的数字通信模型, 即 Things( IoT) 的互联网。 这些智能装置的无缝网络是IoT 模型的核心。 然而, 另一方面, 整合智能设备以组成一个网络会带来许多安全挑战。 这些连接装置创造了一个安全盲点, 网络罪犯可以轻而易举地发动攻击, 以恶意扩散技术破坏设备。 因此, 恶意检测被认为是IOT 设备在网络攻击下生存的生命线。 本研究提出了一个新的 IoT Malware 检测架构( iMDA) 。 这些智能装置的无缝网络是这个 IoT MalayS 模型的核心。 这些智能网络的无缝网络是这个核心。 然而, 整合了边缘和平滑动的智能设备。 网络罪犯和光滑动的操作使用分解- mark( STM ) 来提取本地结构, 和微小对比图像的变异性: STM Centreal deal- dealalal dealalalalalal 4, 也帮助将内部结构整合。