Hands-On Artificial Intelligence for Cybersecurity

Why should we use images for malware detection?

The advantages of representing malware as images are follow ass:

• The ability to recognize specific sections of the malware code, such as those modified by malware developers in an attempt to create different variants of the original code.
• Through the images, it is possible to identify the minor modifications intervened in the code, while preserving the overall structure of the malware image.
• These characteristics have the consequence that the different variants of the malware belonging to the same family are easily recognizable on the basis of the similarity of the respective images that represent them. This is because different types of images correspond to different families of malware.