Computer Malware Classification, Factors, and Detection Techniques: A Systematic Literature Review (SLR)

Asad Hussain; Sunila Fatima Ahmad; Mishal Tanveer; Ansa Sameen Iqbal

Authors

Asad Hussain University of Science and Technology, Bannu, Pakistan.
Sunila Fatima Ahmad University of Sargodha, Sub-Campus, Bhakkar, Pakistan
Mishal Tanveer University of Sargodha, Sub-Campus, Bhakkar, Pakistan
Ansa Sameen Iqbal University of Sargodha, Sub-Campus, Bhakkar, Pakistan

Keywords:

Malware Classification, Malicious Software Factors, Malware Detection technique, Malicious Infection

Abstract

A Systematic Literature Review (SLR) was conducted using tailored searches based on our study topic. We completed all SLR processes, including periodic reviews as SLR. Researchers may find out about the justification, the review procedure, and the research question by using search keywords. This paper describes the trial approach to elaborate the search keywords, resources, restrictions, and validations that were, and explores search strategies made. The reviews are carried out by assessing the publication's quality, devising a data extraction approach, and synthesizing the results. All four research questions were used to analyze the papers concerning the findings. Finally, reports on the categorization of computer malware were analyzed for their detection methods, factors, and how they infiltrate computer systems have been published. SLR identifies the element, characteristics, and detection techniques that are explained in this research paper. Computer malware infects the computer system. This comprehensive literature review's is mainly based on recommendations by earlier studies.

References

D. Uppal, R. Sinha, V. Mehra, and V. Jain, "Malware detection and classification based on extraction of API sequences," in 2014 International conference on advances in computing, communications and informatics (ICACCI), 2014, pp. 2337-2342.

W. Gharibi, "Studying and Classification of the Most Significant Malicious Software," arXiv preprint arXiv:1106.0853, 2011.

S. Divya, "A survey on various security threats and classification of malware attacks, vulnerabilities and detection techniques," International Journal of Computer Science & Applications (TIJCSA), vol. 2, 2013.

A. A. Younis, E. Stronberg, and S. Noor, "User’s Susceptibility Factors to Malware Attacks: A Systemic Literature Review," International Journal of Computer and Information Engineering, vol. 15, pp. 543-554, 2021.

T. M. Chen and J.-M. Robert, "The evolution of viruses and worms," Statistical methods in computer security, vol. 1, pp. 1-16, 2004.

F. Syed, "Understanding worms, their behaviour and containing them," Project Report, 2009.

S. Gupta, "Types of Malware and its Analysis," International Journal of Scientific and Engineering Research, vol. 4, pp. 1-13, 2013.

V. Bhavsar, A. Kadlak, and S. Sharma, "Study on phishing attacks," Int. J. Comput. Appl, vol. 182, pp. 27-29, 2018.

B. Rajesh, Y. J. Reddy, and B. D. K. Reddy, "A survey paper on malicious computer worms," International Journal of Advanced Research in Computer Science and Technology, vol. 3, pp. 161-167, 2015.

B. Anderson, C. Storlie, and T. Lane, "Improving malware classification: bridging the static/dynamic gap," in Proceedings of the 5th ACM workshop on Security and artificial intelligence, 2012, pp. 3-14.

B. Kang, T. Kim, H. Kwon, Y. Choi, and E. G. Im, "Malware classification method via binary content comparison," in Proceedings of the 2012 ACM Research in Applied Computation Symposium, 2012, pp. 316-321.

Y. Guo and W. Fan, "Feature collection and selection in malware classification," in Proceedings of the 2019 International Conference on Artificial Intelligence and Advanced Manufacturing, 2019, pp. 1-5.

E. Gandotra, D. Bansal, and S. Sofat, "Integrated framework for classification of malwares," in Proceedings of the 7th International Conference on Security of Information and Networks, 2014, pp. 417-422.

M. F. Zolkipli and A. Jantan, "An approach for malware behavior identification and classification," in 2011 3rd International Conference on Computer Research and Development, 2011, pp. 191-194.

P. Wang, Z. Tang, and J. Wang, "A novel few-shot malware classification approach for unknown family recognition with multi-prototype modeling," Computers & Security, vol. 106, p. 102273, 2021.

A. Abusitta, M. Q. Li, and B. C. Fung, "Malware classification and composition analysis: A survey of recent developments," Journal of Information Security and Applications, vol. 59, p. 102828, 2021.

G. Raju, P. Zavarsky, A. Makanju, and Y. Malik, "Vulnerability assessment of machine learning based malware classification models," in Proceedings of the Genetic and Evolutionary Computation Conference Companion, 2019, pp. 1615-1618.

K. S. Han, B. Kang, and E. G. Im, "Malware classification using instruction frequencies," in Proceedings of the 2011 ACM Symposium on Research in Applied Computation, 2011, pp. 298-300.

I. A. Saeed, A. Selamat, and A. M. Abuagoub, "A survey on malware and malware detection systems," International Journal of Computer Applications, vol. 67, 2013.

R. Tahir, "A study on malware and malware detection techniques," International Journal of Education and Management Engineering, vol. 8, p. 20, 2018.

P. Singh, S. Tapaswi, and S. Gupta, "Malware detection in pdf and office documents: A survey," Information Security Journal: A Global Perspective, vol. 29, pp. 134-153, 2020.

M. Naseer, J. F. Rusdi, N. M. Shanono, S. Salam, Z. B. Muslim, N. A. Abu, et al., "Malware Detection: Issues and Challenges," in Journal of Physics: Conference Series, 2021, p. 012011.

A. Souri and R. Hosseini, "A state-of-the-art survey of malware detection approaches using data mining techniques," Human-centric Computing and Information Sciences, vol. 8, pp. 1-22, 2018.

Ö. A. Aslan and R. Samet, "A comprehensive review on malware detection approaches," IEEE Access, vol. 8, pp. 6249-6271, 2020.

Q.-L. Han, Y.-J. Hao, Y. Zhang, Z.-P. Lu, and R. Zhang, "A new malware detection method based on raw information," in 2008 International Conference on Apperceiving Computing and Intelligence Analysis, 2008, pp. 307-310.

J. Singh and J. Singh, "A survey on machine learning-based malware detection in executable files," Journal of Systems Architecture, vol. 112, p. 101861, 2021.

K. O. Babaagba and S. O. Adesanya, "A study on the effect of feature selection on malware analysis using machine learning," in Proceedings of the 2019 8th international conference on educational and information technology, 2019, pp. 51-55.

D. Gibert, C. Mateu, and J. Planes, "The rise of machine learning for detection and classification of malware: Research developments, trends and challenges," Journal of Network and Computer Applications, vol. 153, p. 102526, 2020.

J. R. S. Alrzini and D. Pennington, "A review of polymorphic malware detection techniques," International Journal of Advanced Research in Engineering and Technology, vol. 11, pp. 1238-1247, 2020.

M. Sahin and S. Bahtiyar, "A Survey on Malware Detection with Deep Learning," in 13th International Conference on Security of Information and Networks, 2020, pp. 1-6.

Z. Bazrafshan, H. Hashemi, S. M. H. Fard, and A. Hamzeh, "A survey on heuristic malware detection techniques," in The 5th Conference on Information and Knowledge Technology, 2013, pp. 113-120.

S. kumar Sasidharan and C. Thomas, "A survey on metamorphic malware detection based on hidden Markov model," in 2018 International conference on advances in computing, communications and informatics (ICACCI), 2018, pp. 357-362.

F. Manavi and A. Hamzeh, "A new approach for malware detection based on evolutionary algorithm," in Proceedings of the Genetic and Evolutionary Computation Conference Companion, 2019, pp. 1619-1624.

Z. Shafiq and A. Liu, "A graph theoretic approach to fast and accurate malware detection," in 2017 IFIP Networking Conference (IFIP Networking) and Workshops, 2017, pp. 1-9.

O. J. Falana, A. S. Sodiya, S. A. Onashoga, and B. S. Badmus, "Mal-Detect: An intelligent visualization approach for malware detection," Journal of King Saud University-Computer and Information Sciences, 2022.

S. Kim, T. Kim, and E. G. Im, "Real-time malware detection framework in intrusion detection systems," in Proceedings of the 2013 Research in Adaptive and Convergent Systems, ed, 2013, pp. 351-352.

F. L. Lévesque, S. Chiasson, A. Somayaji, and J. M. Fernandez, "Technological and human factors of malware attacks: A computer security clinical trial approach," ACM Transactions on Privacy and Security (TOPS), vol. 21, pp. 1-30, 2018.

C. Simoiu, A. Zand, K. Thomas, and E. Bursztein, "Who is targeted by email-based phishing and malware? measuring factors that differentiate risk," in Proceedings of the ACM Internet Measurement Conference, 2020, pp. 567-576.

F. L. Lévesque, J. M. Fernandez, and A. Somayaji, "Risk prediction of malware victimization based on user behavior," in 2014 9th international conference on malicious and unwanted software: The Americas (MALWARE), 2014, pp. 128-134.

M. Gazzan, A. Alqahtani, and F. T. Sheldon, "Key Factors Influencing the Rise of Current Ransomware Attacks on Industrial Control Systems," in 2021 IEEE 11th Annual Computing and Communication Workshop and Conference (CCWC), 2021, pp. 1417-1422.

K.-s. Choi, T. Scott, and D. P. LeClair, "Ransomware against police: diagnosis of risk factors via application of cyber-routine activities theory," International Journal of Forensic Science & Pathology, 2016.

M. Lee, "Who’s next? identifying risks factors for subjects of targeted attacks," in Proc. Virus Bull. Conf, 2012, pp. 301-306.

E. R. Leukfeldt, "Comparing victims of phishing and malware attacks: Unraveling risk factors and possibilities for situational crime prevention," arXiv preprint arXiv:1506.00769, 2015.

B. A. S. Al-rimy, M. A. Maarof, and S. Z. M. Shaid, "Ransomware threat success factors, taxonomy, and countermeasures: A survey and research directions," Computers & Security, vol. 74, pp. 144-166, 2018.

S. Karapoola, C. Rebeiro, U. Parekh, and K. Veezhinathan, "Towards Identifying Early Indicators of a Malware Infection," in Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security, 2019, pp. 679-681.

F. Lalonde Levesque, J. Nsiempba, J. M. Fernandez, S. Chiasson, and A. Somayaji, "A clinical study of risk factors related to malware infections," in Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security, 2013, pp. 97-108.

F. Salahdine and N. Kaabouch, "Social engineering attacks: A survey," Future Internet, vol. 11, p. 89, 2019.

S. Mohurle and M. Patil, "A brief study of wannacry threat: Ransomware attack 2017," International Journal of Advanced Research in Computer Science, vol. 8, pp. 1938-1940, 2017.

A. Wichmann and E. Gerhards-Padilla, "Using infection markers as a vaccine against malware attacks," in 2012 IEEE International Conference on Green Computing and Communications, 2012, pp. 737-742.

T. J. Holt, G. W. Burruss, and A. M. Bossler, "Assessing the macro-level correlates of malware infections using a routine activities framework," International journal of offender therapy and comparative criminology, vol. 62, pp. 1720-1741, 2018.

W. Xiong and R. Lagerström, "Threat modeling–A systematic literature review," Computers & security, vol. 84, pp. 53-69, 2019.

M. Jakobsson and A. Juels, "Server-side detection of malware infection," in Proceedings of the 2009 workshop on New security paradigms workshop, 2009, pp. 11-22.

I. N. Fovino, A. Carcano, M. Masera, and A. Trombetta, "An experimental investigation of malware attacks on SCADA systems," International Journal of Critical Infrastructure Protection, vol. 2, pp. 139-145, 2009.

Ş. Bahtiyar, "Anatomy of targeted attacks with smart malware," Security and Communication Networks, vol. 9, pp. 6215-6226, 2016.

M. A. H. Saeed, "Malware in computer systems: Problems and solutions," IJID (International Journal on Informatics for Development), vol. 9, pp. 1-8, 2020.

Y. Ye, Q. Jiang, and W. Zhuang, "Associative classification and post-processing techniques used for malware detection," in 2008 2nd International Conference on Anti-counterfeiting, Security and Identification, 2008, pp. 276-279.

J. R. Nurse, "Cybercrime and you: How criminals attack and the human factors that they seek to exploit," arXiv preprint arXiv:1811.06624, 2018.

D. Kong and G. Yan, "Discriminant malware distance learning on structural information for automated malware classification," in Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining, 2013, pp. 1357-1365.

D. V. Sang, D. M. Cuong, and L. T. B. Cuong, "An Effective Ensemble Deep Learning Framework for Malware Detection," in Proceedings of the Ninth International Symposium on Information and Communication Technology, 2018, pp. 192-199.

Y. Zhang, B. Bhargava, and P. Hurni, "The effects of threading, infection time, and multiple-attacker collaboration on malware propagation," in 2009 28th IEEE International Symposium on Reliable Distributed Systems, 2009, pp. 73-82.

F. Mbol, J.-M. Robert, and A. Sadighian, "An efficient approach to detect torrentlocker ransomware in computer systems," in International Conference on Cryptology and Network Security, 2016, pp. 532-541.

P. P. Kundu, L. Anatharaman, and T. Truong-Huu, "An Empirical Evaluation of Automated Machine Learning Techniques for Malware Detection," in Proceedings of the 2021 ACM Workshop on Security and Privacy Analytics, 2021, pp. 75-81.

S. Saxena and S. Mancoridis, "Malware Detection using Behavioral Whitelisting of Computer Systems," in 2019 IEEE International Symposium on Technologies for Homeland Security (HST), 2019, pp. 1-6.

M. Elingiusti, L. Aniello, L. Querzoni, and R. Baldoni, "Malware detection: A survey and taxonomy of current techniques," Cyber threat intelligence, pp. 169-191, 2018.

J. Kim and B.-R. Moon, "New malware detection system using metric-based method and hybrid genetic algorithm," in Proceedings of the 14th annual conference companion on Genetic and evolutionary computation, 2012, pp. 1527-1528.

A. M. Bossler and T. J. Holt, "Online activities, guardianship, and malware infection: An examination of routine activities theory," International Journal of Cyber Criminology, vol. 3, 2009.

S. Abraham and I. Chengalur-Smith, "An overview of social engineering malware: Trends, tactics, and implications," Technology in Society, vol. 32, pp. 183-196, 2010.