# Machine Learning and Deep Learning Based Model for the Detection of Rootkits Using Memory Analysis
## 4 Methodology
### Model Evaluation
(2023)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Artificial Intelligence-Based Malware Detection, Analysis, and Mitigation. _Symmetry_**2023**, _15_, 677. [CrossRef]
* _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]. An Effective Memory Analysis for Malware Detection and Classification. _Comput. Mater. Contin._**2021**, _67_, 2301-2320. [CrossRef]
* _[PERSON] (2021)_ [PERSON] [PERSON]/Malware-Memory-Dataset. GitHub. 5 February 2021. Available online: [[https://github.com/sihwail/malware](https://github.com/sihwail/malware)]([https://github.com/sihwail/malware](https://github.com/sihwail/malware)) -memory-dataset (accessed on 14 April 2023). * _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Catch them alive: A malware detection approach through memory forensics, manifold learning and computer vision. _Comput. Secur._**2021**, _103_, 102166. [CrossRef]
* _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] VolMemLyzer: Volatile Memory Analyzer for Malware Classification using Feature Engineering. In Proceedings of the 2021 Reconciling Data Analytics, Automation, Privacy, and Security: A Big Data Challenge (RDAAPS), Hamilton, ON, Canada, 18-19 May 2021. Available online: [[https://ieeexplore.ieee.org/document/9452028](https://ieeexplore.ieee.org/document/9452028)]([https://ieeexplore.ieee.org/document/9452028](https://ieeexplore.ieee.org/document/9452028)) (accessed on 23 April 2023)
* _[PERSON] et al. (2022)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Detecting Obfuscated Malware using Memory Feature Engineering. In Proceedings of the 8 th International Conference on Information Systems Security and Privacy, Online, 9-11 February 2022. [CrossRef]
* _[PERSON] et al. (2019)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] TKRD: Trusted kernel rootkit detection for cybersecurity of VMs based on Machine Learning and memory forensic analysis. _Math. Biosci. Eng._**2019**, _16_, 2650-2667. [CrossRef] [PubMed]
* _[PERSON] et al. (2019)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] A Kernel Rootkit Detection Approach Based on Virtualization and Machine Learning. _IEEE Access_**2019**, \(7\), 91657-91666. [CrossRef]
* _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] Rootkit Detection on Embedded IoT Devices. _Acta Cybern._**2021**, _25_, 369-400. [CrossRef]
* _[PERSON] et al. (2018)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Toward Developing a Systematic Approach to Generate Benchmark Android Malware Datasets and Classification. In Proceedings of the 2018 International Carnahan Conference on Security Technology (ICCST), Montreal, QC, Canada, 22-25 October 2018; pp. 1-7. [CrossRef]
* _Dumpware 10 Dataset Homepage. Available online: [[https://web.cs.hacettepe.edu.tr/~selman/dumpware10/](https://web.cs.hacettepe.edu.tr/~selman/dumpware10/)]([https://web.cs.hacettepe.edu.tr/~selman/dumpware10/](https://web.cs.hacettepe.edu.tr/~selman/dumpware10/)) (accessed on 17 August 2023). * _Volatility Memory Analyzer._ 2019. Available online: [[https://github.com/ahlashkari/VolMemLyzer](https://github.com/ahlashkari/VolMemLyzer)]([https://github.com/ahlashkari/VolMemLyzer](https://github.com/ahlashkari/VolMemLyzer)) (accessed on 23 April 2023)
* _CIC-MalMem-2022. 2022. Available online: [[https://www.unb.ca/cic/datasets/malmem-2022.html](https://www.unb.ca/cic/datasets/malmem-2022.html)]([https://www.unb.ca/cic/datasets/malmem-2022.html](https://www.unb.ca/cic/datasets/malmem-2022.html)) (accessed on 23 April 2023)
* _[PERSON] et al. (2017)_ [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] On the Detection of Kernel-Level Rootkits Using Hardware Performance Counters. In Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, Abu Dhabi, United Arab Emirates, 2-6 April 2017. [CrossRef]
* _[PERSON] et al. (2016)_ [PERSON]; [PERSON]; [PERSON] Neural Network Analysis of System Call Timing for Rootkit Detection. In Proceedings of the 2016 Cybersecurity Symposium (CYBERSEC), Coeur d'Atene, ID, USA, 18-20 April 2016.