350 rub
Journal Neurocomputers №1 for 2021 г.
Article in number:
Using recurrent neural networks for probabilistic classification of the processor architecture of executable files
DOI: 10.18127/j19998554-202101-05
UDC: 004.934.2
Authors:

A. A. Gladkikh¹, M. O. Komakhin², A. V. Simankov³, D. A. Uzenkov4

1, 2, 4 Department IU4 of Designing and Technology of Electronic Equipment, Bauman Moscow State Technical University (Moscow, Russia)

1–4  JSC “INFORION” (Moscow, Russia)

Abstract:

The main problem of applying recurrent neural networks to the problem of classifying processor architectures is that the use of a recurrent neural network is complicated by the lack of blocks that allow memorizing and taking into account the result of work at each next step. To solve this problem, the authors proposed a strategy for using a neural network based on the mechanism of controlled recurrent blocks. Each neuron of such a network has a memory cell, which stores the previous state and several filters. The update filter determines how much information will remain from the previous state and how much will be taken from the previous layer. The reset filter determines how much information about previous states is lost.

The purpose of the work is to increase the efficiency of determining the processor architecture by code from executable files running on this processor by creating methods, algorithms and programs that are invariant to constant data (strings, constants, header sections, data sections, indents) contained in executable files.

The paper discusses the features of the use of recurrent neural networks on the example of the problem of classifying the processor architecture by executable code from compiled executable files. The features of the machine code of various processor architectures used in modern computing have been briefly considered. The use of recurrent neural networks has been proposed, which have advantages in terms of speed and accuracy in solving classification problems. It is noted that in order to improve the classification results and practical use, it is necessary to provide a larger volume of the training sample for each of the classes, as well as to expand the number of classes.

The proposed method based on a neural network with a mechanism of controlled recurrent blocks has been implemented in the software package that allows processing digital data from executable files for various processor architectures, in particular at the initial stage of security audit of embedded systems in order to determine a set of technical means that can be applied to analysis at subsequent stages. Conclusions have been drawn about the results of measuring the performance metrics of the algorithm and the possibility of expanding functionality without making changes to the architecture of the software package.

Pages: 43-49
For citation

Gladkikh A.A., Komakhin M.O., Simankov A.V., Uzenkov D.A. Using recurrent neural networks for probabilistic classification of the processor architecture of executable files. Neurocomputers. 2021. Vol. 23. No. 1. P. 43–49. DOI:

10.18127/j19998554-202101-05. (

References
  1. Buyanov A.I., Vlasov A.I., Zagoskin A.V. Primenenie nejrosetevykh metodov pri defektoskopii pechatnykh plat. Nejrokomp'yutery: razrabotka, primenenie. 2002. № 3. S. 42–70. (in Russian)
  2. Vlasov A.I., Gridnev V.N., Konstantinov P., Yudin A.V. Nejrosetevye metody defektoskopii pechatnykh plat. Elektronnye komponenty. 2004. № 8. S. 148–155. (in Russian)
  3. Gridnev V.N., Sergeeva M.D., Chebova A.I. Linejnye modeli raspoznavaniya teplovizionnykh izobrazhenij neispravnostej elektronnykh yacheek. Kontrol'. Diagnostika. 2014. № 8. S. 57–66. (in Russian)
  4. Viryasova A.Yu., Vlasov A.I., Gladkikh A.A. Nejrosetevye metody defektoskopii integral'nykh struktur. Nejrokomp'yutery: razrabotka, primenenie. 2019. № 2. S. 54–67. (in Russian)
  5. Svidetel'stvo o registratsii programmy dlya EVM RU 2019618937. Ekspertnaya sistema po obnaruzheniyu defektov provodyashchego risunka pechatnykh plat. E.V. Evdokimova, A.E. Aver'yanikhin, A.I. Vlasov. Opubl. 08.07.2019. (in Russian)
  6. Lawrence S., Giles C.L., Tsoi A.C., Back A.D. Face recognition: A convolutional neural network approach. IEEE Transactions on Neural Networks. Special Issue on Neural Networks and Pattern Recognition. P. 1–24.
  7. Prokhorov V.G. Ispol'zovanie svertochnykh setej dlya raspoznavaniya rukopisnykh simvolov. Problemi programuvaniya. 2008. № 2–3. S. 669–674. (in Russian)
  8. Rys'myatova A.A. Ispol'zovanie svertochnykh nejronnykh setej dlya zadachi klassifikatsii tekstov. M.: Moskovskij gosudarstvennyj universitet imeni M.V. Lomonosova. 2016. (in Russian)
  9. Shakhnov V.A., Vlasov A.I., Polyakov Yu.A., Kuznetsov A.S. Nejrokomp'yutery: arkhitektura i skhemotekhnika. Prilozhenie k zhurnalu «Informatsionnye tekhnologii». № 9. M.: Mashinostroenie. 2000. (in Russian)
  10. Glushko A.A., Busov V.D., Perederin K.D. Metody algoritmicheskogo proektirovaniya iskusstvennogo intellekta. Tekhnologii inzhenernykh i informatsionnykh sistem. 2019. № 2. S. 72–88. (in Russian)
Date of receipt: 20.11.2020.
Approved after review: 04.12.2020.
Accepted for publication: 16.12.2020.