Detection of Malware and Benign Samples in AWSCTD Dataset with Kolmogorov-Arnold Networks
摘要
Malware can cause abnormal events in computer systems, such as occupying or blocking access to resources like CPU and memory. Various malware detection systems utilize machine/deep learning methods as detectors to identify such threats. In this study, Kolmogorov-Arnold Network (KAN) models are developed to detect malware using system call sequences. The KAN models are trained and tested using the MalwarePlusClean2 subset of the AWSCTD dataset. Experimental results show that the KAN models achieve an accuracy (ACC) of 92.62%. The performance of the KAN models is compared with that of artificial neural networks (ANN) models, showing that KAN models outperform ANN models. Furthermore, the performance of the KAN models is evaluated in comparison with long short-term memory (LSTM), gated recurrent unit (GRU), support vector machine (SVM), and one-dimensional convolutional neural network (1D-CNN) models from the literature. The evaluation indicates KAN models generally perform better than SVM models. Additionally, it is observed that the KAN models achieve performance levels close to that of the LSTM, GRU, and 1D-CNN models.