View : 416 Download: 0
Data Embedding Scheme for Efficient Program Behavior Modeling With Neural Networks
- Title
- Data Embedding Scheme for Efficient Program Behavior Modeling With Neural Networks
- Authors
- Ahn S.; Yi H.; Bae H.; Yoon S.; Paek Y.
- Ewha Authors
- 배호
- SCOPUS Author ID
- 배호
- Issue Date
- 2022
- Journal Title
- IEEE Transactions on Emerging Topics in Computational Intelligence
- ISSN
- 2471-285X
- Citation
- IEEE Transactions on Emerging Topics in Computational Intelligence, pp. 1 - 12
- Keywords
- Adaptation models; Analytical models; Artificial neural network; Codes; Computational modeling; Data models; deep learning; feature embedding; natural language processing; Neural networks; program behavior modeling; Runtime
- Publisher
- Institute of Electrical and Electronics Engineers Inc.
- Indexed
- SCIE; SCOPUS
- Document Type
- Article
- Abstract
- As modern programs grow in size and complexity, the importance of program behavior modeling is emerging in various areas. Because of the large amount of data generated by a target program and the difficulty of runtime analysis, previous works in these areas employ deep learning. However, they did not sufficiently consider the input of a target program, since, in our view, program behavior is a history of computational steps consisting of a function and its input arguments. A naive, intuitive way to embed the value of <formula><tex>$x$</tex></formula> as it is in a vector representation creates a tremendously large vector size. Instead, we found that all the values inducing the same runtime behavior can be represented as one identical characteristic value (CV). In this paper, we show that not only can a characteristic value sequence replace the argument input, but it is also efficient to use it as an input vector for a neural network. This efficiency comes from modeling the whole program with multiple LSTM-RNN models and reducing the input space of the neural network. To demonstrate the effectiveness of this replacement, we performed experiments on the problem of program behavior anomaly detection. Our results show that our model achieves better detection performance compared to previous models and similar detection performance even with smaller model sizes. We also provide a visualization of the embedded vectors extracted from the embedding layer in the neural network model to prove that the CV sequence well represents the arguments. Author
- DOI
- 10.1109/TETCI.2022.3146425
- Appears in Collections:
- 인공지능대학 > 사이버보안학과 > Journal papers
- Files in This Item:
There are no files associated with this item.
- Export
- RIS (EndNote)
- XLS (Excel)
- XML