Enhancing ransomware detection using siamese network

Muhammad Khamis Dauda; Iftikhar Ahmad; Madini O. Alassafi

Author(s)

Muhammad Khamis Dauda Department of Information Technology, Faculty of Computing and Information Technology King Abdulaziz University (KAU),Jeddah Saudia Arabia,

Iftikhar Ahmad Department of Information Technology, Faculty of Computing and Information Technology King Abdulaziz University (KAU),Jeddah Saudia Arabia,

Madini O. Alassafi Department of Information Technology, Faculty of Computing and Information Technology King Abdulaziz University (KAU),Jeddah Saudia Arabia,

Abstract

Organizations in the current digital era are exposed to a variety of cybersecurity threats that can often result in financial losses and harm to their reputation. Among these threats, ransomware attacks can cause significant damage. Attackers are constantly improving their techniques to bypass security channels, which makes it challenging to monitor and detect the patterns of attacks. Consequently, there is a growing inclination towards employing state-of-the-art techniques to identify and defend during ransomware attacks. Deep learning is a proven technique that can be employed to learn from large complex patterns. However, large datasets are required in the training of deep learning models which is a challenging task. Few-shot learning (FSL) overcomes this limitation by using less data. In this research work, a Siamese network design is developed by incorporating the architectural principles of AlexNet and features of the VGG configuration. The employed methodology enables us to evaluate the inherent resemblances and disparities in the data. This novel methodology demonstrated exceptional performance, with an average accuracy of 97% when compared to various effects and learning rates. The results of the presented study demonstrate the capacity to greatly enhance cybersecurity by providing a scalable and effective approach for detecting ransomware.

Publication Details

Page(s) 242-256

DOI DOI not available

Published Journal: ARPN Journal of Engineering and Applied Sciences, Volume: 19, Issue: 4, Year: 2024

Request the full text from PASTIC

Keywords

Siamese networks, AlexNet, VGG, metric learning model, ransomware detection

References

.2022 .Percentage of organizations victimized by ransomware attacks worldwide from 2018 to 2022. , 11 : .

Huisman M.,J. N. van Rijn M.,Plaat A. . .A survey of deep meta‑learning.. , : .

Mohammadi F. G.,Amini M. H.,Arabnia H. R.,Optimization H. R.,Amini M. H. .2020 .Control for Interdependent Complex Networks. in Advances in Intelligent Systems and Computing, 10(0) : 6-144.

Zhu J.,Jang-Jaccard J.,Singh A.,I. Welch A.,Camtepe S. .2022 .A few-shot metalearning based siamese neural network using entropy features for ransomware classification. Computers & Security, 102691 : .

Recognition Pattern .2024 .Machine Learning. Accessed: Feb. 14, : .

.2024 .[6] Introduction to Semi-Supervised Learning | SpringerLink. , 14 : 031.

Pu G.,Wang L.,Shen J.,Dong F. .2019 .A hybrid unsupervised clustering-based anomaly detection method. Tsinghua Science and Technology, 9010051(2) : 146-153.

Razaulla S. .2023 .The Age of Ransomware: A Survey on the Evolution, Taxonomy. , 3268535 : 40698-40723.

Parkar P.,Bilimoria A. .2021 .A Survey on Cyber Security IDS using ML Methods. in 2021 5th International Conference on Intelligent Computing and Control Systems (ICICCS), 9432210 : 352-360.

Sharma S.,Krishna C. R.,Kumar R. .2021 .RansomDroid: Forensic analysis and detection of Android Ransomware using unsupervised machine learning technique. Forensic Science International: Digital Investigation, 301168 : .

Khammas B. M. .2020 .Ransomware Detection using Random Forest Technique. ICT Express, 11(4) : 325-331.

Hwang J.,Kim J.,Lee S.,Kim K. .2020 .TwoStage Ransomware Detection Using Dynamic Analysis and Machine Learning Techniques. Wireless Pers Commun, 112(4) : 2597-2609.

Yilmaz Y.,Cetin O.,Arief B.,J. HernandezCastro. B. .2021 .Investigating the impact of ransomware splash screens. Journal of Information Security and Applications, 102934 : .

Faghihi F.,Zulkernine M. .2021 .RansomCare: Data-centric detection and mitigation against smartphone crypto-ransomware. Computer Networks, 108011 : .

S. N. .2021 .Ant Colony Optimization based light weight Binary Search for efficient signature matching to filter Ransomware. , 107635 : .

Ramesh G.,Menen A. .2020 .Automated dynamic approach for detecting ransomware using finite-state machine. Decision Support Systems, 113400 : .

Yang A. .2022 .Application of meta-learning in cyberspace security: a survey. Digital Communications and Networks, 03 : .

Mascarenhas S.,Agarwal M. .2021 .A comparison between VGG16, VGG19 and ResNet50 architecture frameworks for Image Classification. in 2021 International Conference on Disruptive Technologies for Multi-Disciplinary Research and Applications (CENTCON), 9687944 : 96-99.

Krizhevsky A.,Hinton G. E. .2017 .ImageNet classification with deep convolutional neural networks. Commun. ACM, 60(6) : 84-90.

Liu S.,Deng W. .2015 .Very deep convolutional neural network based image classification using small training sample size. in 2015 3rd IAPR Asian Conference on Pattern Recognition (ACPR), 7486599 : 730-734.

He K.,Zhang X.,Ren S.,Sun J. .2016 .Deep Residual Learning for Image Recognition. 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 90 : 770-778.

Szegedy C. .2024 .Deeper_With_2015_CVPR_paper. Presented at the Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 14 : 1-9.

Cui Z.,Du L.,Wang P.,Cai X.,Zhang W. .2019 .Malicious code detection based on CNNs and multiobjective algorithm. Journal of Parallel and Distributed Computing, 03 : 50-58.

Yue S.,Wang T. .2022 .Imbalanced Malware Images Classification: a CNN based Approach. , : .

Chen L. .1812 .Deep Transfer Learning for Static Malware Classification. , 07606 : .

Lo W. W.,Yang X.,Wang Y. .2019 .An Xception Convolutional Neural Network for Malware Classification with Transfer Learning. in 2019 10th IFIP International Conference on New Technologies, Mobility and Security (NTMS), 8763852 : 1-5.

Cui Z.,Xue F.,Cai X.,Cao Y.,Wang G.,Chen J. .2018 .Detection of Malicious Code Variants Based on Deep Learning. IEEE Transactions on Industrial Informatics, 2822680(7) : 3187-3196.

Sharma S.,Singh S. .2021 .. Automated Classification of Ransomware. J. Inst. Eng. India Ser. B, 102(1) : 131-142.

Arabo A.,Dijoux R.,Poulain T.,Chevalier G. .2020 .Detecting Ransomware Using Process Behavior Analysis. Procedia Computer Science, 02 : 289-296.

Roy K. C.,Chen Q. .2021 .DeepRan: Attentionbased BiLSTM and CRF for Ransomware Early Detection and Classification. Inf Syst Front, 23(2) : 299-315.

Zahoora U.,Rajarajan M.,Pan Z.,Khan A. .2022 .Zero-day Ransomware Attack Detection using Deep Contractive Autoencoder and Voting based Ensemble Classifier. Appl. Intell. doi: 10.1007/s10489-022- 03244-6., : .

Joshi Y. S.,Mahajan H.,Joshi S. N.,Gupta K. P.,Agarkar A. A. .2021 .Signature-less ransomware detection and mitigation. J Comput Virol Hack Tech, 17(4) : 299-306.

T.-M. Liu Y.,Kao Y.-Y.,Chen Y.-Y. .2020 .LooCipher Ransomware Detection Using Lightweight Packet Characteristics. Procedia Computer Science, 09 : 1677-1683.

Hirano M.,Hodota R.,Kobayashi R. .2021 .RanSAP: An open dataset of ransomware storage access patterns for training machine learning models. Forensic Science International: Digital Investigation, 301314 : .

Demon .2024 .Improved Neural Network Training with Momentum Decay. Accessed: Feb. 21, : .

Bajaj A. .2024 .-clipping-and-how-it-can-fix-explodinggradients-problem. Accessed: Feb. 21, : .