no-3

TFC-MAL: application of Triplet Loss for malware detection based on image representation

Authors:
Mai Dang Thi, Hien Dinh Cong
Pages:
0
View:
8
Position:
1/1
Download:
1
Detecting polymorphic and zero-day malware remains a significant challenge due to the high similarity in characteristics between malicious variants and benign files, which reduces the effectiveness of traditional Cross-Entropy-based approaches. This paper proposes the TFC-MAL (Triplet-based Feature Compactness for Malware Detection) framework, which employs Triplet Loss to learn a discriminative embedding space from malware image representations. By optimizing relative distances with a fixed margin, Triplet Loss generates embedding vectors with high intra-class compactness and clear inter-class separation, thereby enhancing generalization to previously unseen samples. Experimental results demonstrate that TFC-MAL combined with an SVM classifier achieves the highest accuracy of 90.83% on the Unknown-ClamAV dataset, representing an improvement of 11.43% over the current state-of-the-art method. In addition, the proposed system maintains high performance on benign samples (96.76%) and...
Detecting polymorphic and zero-day malware remains a significant challenge due to the high similarity in characteristics between malicious variants and benign files, which reduces the effectiveness of traditional Cross-Entropy-based approaches. This paper proposes the TFC-MAL (Triplet-based Feature Compactness for Malware Detection) framework, which employs Triplet Loss to learn a discriminative embedding space from malware image representations. By optimizing relative distances with a fixed margin, Triplet Loss generates embedding vectors with high intra-class compactness and clear inter-class separation, thereby enhancing generalization to previously unseen samples. Experimental results demonstrate that TFC-MAL combined with an SVM classifier achieves the highest accuracy of 90.83% on the Unknown-ClamAV dataset, representing an improvement of 11.43% over the current state-of-the-art method. In addition, the proposed system maintains high performance on benign samples (96.76%) and known malware samples (96.84%) when using an MLP classifier. These results confirm that Triplet Loss provides superior generalization capability for detecting zero-day malware and polymorphic variants.
Relate
Emergency braking of the 2022 KIA Seltos under different road conditions
Minh Luong Ngoc, Nguyen Phi Cuong Anh, Uy Nguyen Ba
Volume 55, Issue 3A, 09/2026
An Efficient TinyML Framework for Real-Time Sensor Data Processing
Kiên Phạm Xuân
Volume 55, Issue 3A, 09/2026
A Remark on the Countably Σ−CS Ring
An Le Van, Anh To Ngoc Le
Volume 55, Issue 3A, 09/2026
GNN-enhanced multi-agent DRL for adaptive anti-jamming routing in MANETs
Hanh Vu My, Oanh Le Thi Kieu
Volume 55, Issue 3A, 09/2026
Lightweight DAG-blockchain framework for trust management in edge-assisted VANETs
Hang Dao Thi, Phi Pham Van, Hien Tran Thi
Volume 55, Issue 3A, 09/2026

Vinh University journal of science

Tạp chí khoa học Trường Đại học Vinh

ISSN: 1859 - 2228

Governing body: Vinh University

  • Address: 182 Le Duan - Vinh City - Nghe An province
  • Phone: (+84) 238.3855.452 - Fax: (+84) 238.3855.269
  • Email: vinhuni@vinhuni.edu.vn
  • Website: https://vinhuni.edu.vn

 

License: 163/GP-BTTTT issued by the Minister of Information and Communications on May 10, 2023

Open Access License: Creative Commons CC BY NC 4.0

 

CONTACT

Editor-in-Chief: Assoc. Prof., Dr. Tran Ba Tien
Email: tientb@vinhuni.edu.vn

Deputy editor-in-chief: Assoc. Prof., Dr. Phan Van Tien
Email: vantienkxd@vinhuni.edu.vn

Sub-Editor: Dr. Do Mai Trang
Email: domaitrang@vinhuni.edu.vn

Editorial assistant: Msc. Le Tuan Dung, Msc. Phan The Hoa, Msc. Pham Thi Quynh Nga, Msc. Tran Thi Thai

  • Address: 4th Floor, Executive Building, No. 182, Le Duan street, Vinh city, Nghe An province.
  • Phone: (+84) 238-385-6700 | Hotline: (+84) 97-385-6700
  • Email: editors@vujs.vn
  • Website: https://vujs.vn

img