{"id":{"repo_id":"uwtsd","oai_identifier":"oai:repository.uwtsd.ac.uk:3309"},"canonical_url":"https://search.dev.ndltd.org/etd/uwtsd/oai:repository.uwtsd.ac.uk:3309","repository":{"repo_id":"uwtsd","name":"University of Wales Trinity Saint David","base_url":"https://repository.uwtsd.ac.uk/cgi/oai2"},"display":{"title":"A Malware Classification Method Based on the Multi-Layer Feature Fusion of Malware Image Representations and Opcode Markov Images","abstract":"As the threat of malware to information security becomes increasingly severe, the study of efficient malware classification methods has become more urgent. This paper proposes a multilayer malware classification method based on the fusion of image representation and opcode features. By integrating the features of image-based malware representation and opcode Markov image, the classification performance is enhanced. Specifically, our model introduces two feature fusion modules: a cross-attention-based fusion module and a multiplication-based low-level feature fusion module. These modules achieve effective fusion of deep features, thereby improving the accuracy of malware classification. Experimental results show that the model combining malware image features extracted by ResNet18 and malware opcode Markov image features extracted by EfficientNetB0 performs the best. Comparative experiments with traditional feature fusion methods demonstrate that our approach has significant advantages in classification performance. Further experiments on another dataset validate the generalization ability of our method. This research provides an efficient and effective solution for malware classification.","abstract_html":"As the threat of malware to information security becomes increasingly severe, the study of efficient malware classification methods has become more urgent. This paper proposes a multilayer malware classification method based on the fusion of image representation and opcode features. By integrating the features of image-based malware representation and opcode Markov image, the classification performance is enhanced. Specifically, our model introduces two feature fusion modules: a cross-attention-based fusion module and a multiplication-based low-level feature fusion module. These modules achieve effective fusion of deep features, thereby improving the accuracy of malware classification. Experimental results show that the model combining malware image features extracted by ResNet18 and malware opcode Markov image features extracted by EfficientNetB0 performs the best. Comparative experiments with traditional feature fusion methods demonstrate that our approach has significant advantages in classification performance. Further experiments on another dataset validate the generalization ability of our method. This research provides an efficient and effective solution for malware classification.","abstract_has_math":false,"creators":["Xu, Jinwei"],"institution":"University of Wales Trinity Saint David","degree_name":"msc","degree_level":"masters","degree_discipline":null,"degree_department":null,"school":null,"contributors":[],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2024,"date_issued":"2024-11","date_published":"2024-11","updated_at":"2026-07-24T05:53:02Z","subjects":["TK Peirianneg drydanol. Peirianneg Niwclear Electronig"],"languages":[],"rights":[],"rights_urls":[],"identifier_entries":[{"key":"dc:identifier.grantnumber","label":"Dc Identifier Grantnumber","values":["UWTSD"],"render_values":[{"text":"UWTSD","href":null,"code":true}]}]},"links":{"outbound_url":"https://doi.org/10.82227/repository.uwtsd.ac.uk.00003309","outbound_label":"DOI","outbound_source":"dc:identifier.doi"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor.sponsor","label":"Sponsor","values":["University of Wales Trinity Saint David"]},{"key":"dc:creator","label":"Author","values":["Xu, Jinwei"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2024-11-11"]},{"key":"dc:date.issued","label":"Date","values":["2024-11"]},{"key":"dc:publisher.commercial","label":"Dc Publisher Commercial","values":["University of Wales Trinity Saint David"]},{"key":"dc:publisher.department","label":"Dc Publisher Department","values":["Traethodau Meistr","Wales Institute for Science and Art: Applied Computing"]},{"key":"dc:publisher.institution","label":"Dc Publisher Institution","values":["University of Wales Trinity Saint David"]},{"key":"dc:relation.isreferencedby","label":"Dc Relation Isreferencedby","values":["https://repository.uwtsd.ac.uk/id/eprint/3309/"]},{"key":"dc:type","label":"Dc Type","values":["Gosodiad"]},{"key":"dc:type.qualificationlevel","label":"Dc Type Qualificationlevel","values":["masters"]},{"key":"dc:type.qualificationname","label":"Dc Type Qualificationname","values":["msc"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["TK Peirianneg drydanol. Peirianneg Niwclear Electronig"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier.doi","label":"DOI","values":["10.82227/repository.uwtsd.ac.uk.00003309"]},{"key":"dc:identifier.grantnumber","label":"Dc Identifier Grantnumber","values":["UWTSD"]},{"key":"dc:identifier.uri","label":"Identifier URI","values":["https://repository.uwtsd.ac.uk/id/eprint/3309/1/Xu_Jinwei_MSc_2024_Thesis.pdf"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description.abstract","label":"Abstract","values":["As the threat of malware to information security becomes increasingly severe, the study of efficient malware classification methods has become more urgent. This paper proposes a multilayer malware classification method based on the fusion of image representation and opcode features. By integrating the features of image-based malware representation and opcode Markov image, the classification performance is enhanced. Specifically, our model introduces two feature fusion modules: a cross-attention-based fusion module and a multiplication-based low-level feature fusion module. These modules achieve effective fusion of deep features, thereby improving the accuracy of malware classification. Experimental results show that the model combining malware image features extracted by ResNet18 and malware opcode Markov image features extracted by EfficientNetB0 performs the best. Comparative experiments with traditional feature fusion methods demonstrate that our approach has significant advantages in classification performance. Further experiments on another dataset validate the generalization ability of our method. This research provides an efficient and effective solution for malware classification."]},{"key":"dc:format","label":"Dc Format","values":["text"]},{"key":"dc:title","label":"Title","values":["A Malware Classification Method Based on the Multi-Layer Feature Fusion of Malware Image Representations and Opcode Markov Images"]}]}],"canonical_facts":{"dc:contributor.sponsor":["University of Wales Trinity Saint David"],"dc:creator":["Xu, Jinwei"],"dc:date":["2024-11-11"],"dc:date.issued":["2024-11"],"dc:description.abstract":["As the threat of malware to information security becomes increasingly severe, the study of efficient malware classification methods has become more urgent. This paper proposes a multilayer malware classification method based on the fusion of image representation and opcode features. By integrating the features of image-based malware representation and opcode Markov image, the classification performance is enhanced. Specifically, our model introduces two feature fusion modules: a cross-attention-based fusion module and a multiplication-based low-level feature fusion module. These modules achieve effective fusion of deep features, thereby improving the accuracy of malware classification. Experimental results show that the model combining malware image features extracted by ResNet18 and malware opcode Markov image features extracted by EfficientNetB0 performs the best. Comparative experiments with traditional feature fusion methods demonstrate that our approach has significant advantages in classification performance. Further experiments on another dataset validate the generalization ability of our method. This research provides an efficient and effective solution for malware classification."],"dc:format":["text"],"dc:identifier.doi":["10.82227/repository.uwtsd.ac.uk.00003309"],"dc:identifier.grantnumber":["UWTSD"],"dc:identifier.uri":["https://repository.uwtsd.ac.uk/id/eprint/3309/1/Xu_Jinwei_MSc_2024_Thesis.pdf"],"dc:publisher.commercial":["University of Wales Trinity Saint David"],"dc:publisher.department":["Traethodau Meistr","Wales Institute for Science and Art: Applied Computing"],"dc:publisher.institution":["University of Wales Trinity Saint David"],"dc:relation.isreferencedby":["https://repository.uwtsd.ac.uk/id/eprint/3309/"],"dc:subject":["TK Peirianneg drydanol. Peirianneg Niwclear Electronig"],"dc:title":["A Malware Classification Method Based on the Multi-Layer Feature Fusion of Malware Image Representations and Opcode Markov Images"],"dc:type":["Gosodiad"],"dc:type.qualificationlevel":["masters"],"dc:type.qualificationname":["msc"]},"updated_at":"2026-07-24T05:53:02Z"}