Detection of Obfuscation Malware: A Federated Transfer Learning-based Approach with Hybrid Neural Networks

Autor(es)

Reis, Carlos J. ; Tojeiro, Carlos A. C. ; Lucas, Thiago Jose ; da Costa, Kelton A. P.

• Tipo de documento: Artigo Científico
• Fonte: IEEE Latin America Transactions; v. 23, n. 12, p. 12-pg., 2025-12-01.

Resumo

The increase in the incidence of cyberattacks, especially through the use of complex mechanisms for exploiting vulnerabilities, such as malware obfuscation, has driven the adoption of Machine Learning (ML) techniques in cybersecurity. This study investigates the application of Federated Learning (FL), a decentralized approach that preserves data privacy and overcomes challenges in transferring large volumes of information. Two labeled datasets were used, CIC-MalMem-2022 and Malware Detection Dataset, along with two FL frameworks, Flower Framework and TensorFlow Federated. A decentralized model based on a Linear Neural Network (LNN) with federated averaging (FedAvg) was compared to a centralized model using a Recurrent Neural Network (RNN) in supervised binary classifications of malware. The results demonstrate high accuracy across all analyzed scenarios, highlighting the outcomes obtained in centralized training for the CIC-Malware dataset, achieving an accuracy of 0.99, precision of 1.0, and recall of 0.99, emphasizing the potential of FL in cybersecurity. (AU)

• Processo FAPESP: 23/12830-0 - Sistemas Inteligentes Quânticos para Segurança Cibernética
• Beneficiário: Kelton Augusto Pontara da Costa
• Modalidade de apoio: Auxílio à Pesquisa - Regular
• Processo FAPESP: 23/00466-1 - Integração de um sistema de rastreabilidade baseado em Blockchain, integrado aos processos de logística reversa de resíduos eletrônicos.
• Beneficiário: Ana Carolina Rodrigues
• Modalidade de apoio: Bolsas no Brasil - Programa Capacitação - Treinamento Técnico