• Home
  • Search
  • Efficient Image-Based Memory Forensics for Fileless Malware Detection Using Texture Descriptors and LIME-Guided Deep Learning
  • https://doi.org/10.3390/computers14110467Copy DOI Icon

Efficient Image-Based Memory Forensics for Fileless Malware Detection Using Texture Descriptors and LIME-Guided Deep Learning

Show More
  • Abstract
  • Literature Map
  • References
  • Similar Papers
Abstract

Memory forensics is an essential cybersecurity tool that comprehensively examines volatile memory to detect the malicious activity of fileless malware that can bypass disk analysis. Image-based detection techniques provide a promising solution by visualizing memory data into images to be used and analyzed by image processing tools and machine learning methods. However, the effectiveness of image-based data for detection and classification requires high computational efforts. This paper investigates the efficacy of texture-based methods in detecting and classifying memory-resident or fileless malware using different image resolutions, identifying the best feature descriptors, classifiers, and resolutions that accurately classify malware into specific families and differentiate them from benign software. Moreover, this paper uses both local and global descriptors, where local descriptors include Oriented FAST and Rotated BRIEF (ORB), Scale-Invariant Feature Transform (SIFT), and Histogram of Oriented Gradients (HOG) and global descriptors include Discrete Wavelet Transform (DWT), GIST, and Gray Level Co-occurrence Matrix (GLCM). The results indicate that as image resolution increases, most feature descriptors yield more discriminative features but require higher computational efforts in terms of time and processing resources. To address this challenge, this paper proposes a novel approach that integrates Local Interpretable Model-agnostic Explanations (LIME) with deep learning models to automatically identify and crop the most important regions of memory images. The LIME’s ROI was extracted based on ResNet50 and MobileNet models’ predictions separately, the images were resized to 128 × 128, and the sampling process was performed dynamically to speed up LIME computation. The ROIs of the images are cropped to new images with sizes of (100 × 100) in two stages: the coarse stage and the fine stage. The two generated LIME-based cropped images using ResNet50 and MobileNet are fed to the lightweight neural network to evaluate the effectiveness of the LIME-based identified regions. The results demonstrate that the LIME-based MobileNet model’s prediction improves the efficiency of the model by preserving important features with a classification accuracy of 85% on multi-class classification.

Similar Papers
  • Conference Article

A Novel Multi-Feature Extraction Approach for Plant Disease Detection Using Transfer Learning and Handcrafted Methods

  • Jun 12, 2025
  • Naladi Ram Babu +1
  • Research Article
  • Citations4

An Enhanced Multiscale Retinex, Oriented FAST and Rotated BRIEF (ORB), and Scale-Invariant Feature Transform (SIFT) Pipeline for Robust Key Point Matching in 3D Monitoring of Power Transmission Line Icing with Binocular Vision

  • Oct 30, 2024
  • Electronics
  • Nalini Rizkyta Nusantika +2
  • Research Article
  • Citations243

2D object recognition: a comparative analysis of SIFT, SURF and ORB feature descriptors

  • Feb 20, 2021
  • Multimedia Tools and Applications
  • Monika Bansal +2
  • PDF
  • Research Article
  • Citations2

Satellite remote sensing image classification based on multiple deep learning algorithms

  • Apr 30, 2024
  • Applied and Computational Engineering
  • Shiqi Ren
  • Research Article

A Multi-Feature Extraction and Selection Framework for High-Accuracy Surface Defect Classification in Industrial Casting Parts

  • Dec 23, 2025
  • Karamanoğlu Mehmetbey Üniversitesi Mühendislik ve Doğa Bilimleri Dergisi
  • Mustafa Büber +1
  • Research Article
  • Citations5

3D Biological/Biomedical Image Registration with enhanced Feature Extraction and Outlier Detection.

  • Sep 03, 2023
  • ACM-BCB ... ... : the ... ACM Conference on Bioinformatics, Computational Biology and Biomedicine. ACM Conference on Bioinformatics, Computational Biology and Biomedicine
  • Sahand Hamzehei +5
  • Conference Article
  • Citations3

Feature Descriptors for Spotting 3D Characters on Triangular Meshes

  • Aug 01, 2018
  • Bartosz Bogacz +1
  • Book Chapter
  • Citations1

Feature Extraction and Selection with Hyperparameter Optimization for Mitosis Detection in Breast Histopathology Images

  • Dec 03, 2022
  • Suchith Ponnuru +1
  • Conference Article
  • Citations289

Recurrent Saliency Transformation Network: Incorporating Multi-stage Visual Cues for Small Organ Segmentation

  • Jun 01, 2018
  • Qihang Yu +5
  • Research Article
  • Citations18

A texture feature based approach for person verification using footprint bio-metric

  • Aug 09, 2020
  • Artificial Intelligence Review
  • Riti Kushwaha +2
  • Book Chapter
  • Citations11

Image Recognition and Extraction on Computerized Vision for Sign Language Decoding

  • May 20, 2024
  • M Gandhi +5
  • Conference Article
  • Citations1

Comparison of Convolutional Neural Network and Capsule Network in Image Recognition- A Case Study of Microbiopsy Images of Breast Tumor

  • Sep 23, 2022
  • Jiaqiao Xu
  • Conference Article
  • Citations5

Efficiency Comparison of Supervised and Unsupervised Classifier on Content Based Classification using Shape, Color, Texture

  • Jun 01, 2020
  • Poornima Raikar +1
  • Conference Article
  • Citations1

Real time Image Recognition Based on low cost Processing Platform

  • Oct 01, 2019
  • Diana Baicu +3
  • PDF
  • Research Article
  • Citations14

An Efficient System for Automatic Blood Type Determination Based on Image Matching Techniques

  • Jun 04, 2021
  • Applied Sciences
  • Nuha Odeh +5
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.