Malware variants are the major emerging threats that face cybersecurity due to the potential damage to computer systems. Many solutions have been proposed for detecting malware variants. However, accurate detection is challenging due to the constantly evolving nature of the malware variants that cause concept drift. Existing malware detection solutions assume that the mapping learned from historical malware features will be valid for new and future malware. The relationship between input features and the class label has been considered stationary, which doesn't hold for the ever-evolving nature of malware variants. Malware features change dynamically due to code obfuscations, mutations, and the modification made by malware authors to change the features' distribution and thus evade the detection rendering the detection model obsolete and ineffective. This study presents an Adaptive behavioral-based Incremental Batch Learning Malware Variants Detection model using concept drift detection and sequential deep learning (AIBL-MVD) to accommodate the new malware variants. Malware behaviors were extracted using dynamic analysis by running the malware files in a sandbox environment and collecting their Application Programming Interface (API) traces. According to the malware first-time appearance, the malware samples were sorted to capture the malware variants' change characteristics. The base classifier was then trained based on a subset of historical malware samples using a sequential deep learning model. The new malware samples were mixed with a subset of old data and gradually introduced to the learning model in an adaptive batch size incremental learning manner to address the catastrophic forgetting dilemma of incremental learning. The statistical process control technique has been used to detect the concept drift as an indication for incrementally updating the model as well as reducing the frequency of model updates. Results from extensive experiments show that the proposed model is superior in terms of detection rate and efficiency compared with the static model, periodic retraining approaches, and the fixed batch size incremental learning approach. The model maintains an average of 99.41% detection accuracy of new and variants malware with a low updating frequency of 1.35 times per month.

The banking and financial sector has always been a prime target for cyber threats due to the critical nature of the information they handle. With the increasing dependence on technology and digital transformation, the sector is facing more complex and sophisticated threats from cybercriminals. The banking sector serves as the backbone of a country’s economy, interlinked with various other sectors like petroleum, mining, health, and industry. Any significant damage to the banking sector can send shockwaves through the entire economic landscape. Therefore, cyber threat classifications play a crucial role in risk management and provide a valuable framework for understanding and responding to cyber threats. Understanding the potential impact of a cyber-attack helps organisations assess the risks they face and develop appropriate risk mitigation strategies. The purpose of this research paper is to provide a comprehensive analysis of cyber threats in the banking and financial sectors, including identifying common threats, their nature and character to help in classification. One of the significant contributions of this research paper is to classify cyber threats to the banking and financial sectors based on their severity and technicality. This classification helps to identify the appropriate countermeasures required to mitigate the risks of each type of threat. Furthermore, the paper explores the technical, non-technical, organizational countermeasures and the legal and regulatory measures used to protect financial transactions from cyber threats. This research work delves into the challenges and limitations of cyber threat classifications, focusing specifically on those confronting the banking and financial sector in their pursuit of robust cybersecurity. Additionally, it analyses recent trends and developments in the field, highlighting the evolving nature of cyber threats to banking. The most significant challenge is the rapidly evolving nature of cyber threats, making it challenging to keep up with the latest trends and technologies.

Background/Objectives: Artificial intelligence-based software as a medical device (AI-SaMD) refers to AI-powered software used for medical purposes without being embedded in physical devices. Despite increasing approvals over the past decade, research in this domain—spanning technology, healthcare, and national security—remains limited. This research aims to bridge the existing research gap in AI-SaMD by systematically reviewing the literature from the past decade, with the aim of classifying key findings, identifying critical challenges, and synthesizing insights related to technological, clinical, and regulatory aspects of AI-SaMD. Methods: A systematic literature review based on the PRISMA framework was performed to select the relevant AI-SaMD studies published between 2015 and 2024 in order to uncover key themes such as publication venues, geographical trends, key challenges, and research gaps. Results: Most studies focus on specialized clinical settings like radiology and ophthalmology rather than general clinical practice. Key challenges to implement AI-SaMD include regulatory issues (e.g., regulatory frameworks), AI malpractice (e.g., explainability and expert oversight), and data governance (e.g., privacy and data sharing). Existing research emphasizes the importance of (1) addressing the regulatory problems through the specific duties of regulatory authorities, (2) interdisciplinary collaboration, (3) clinician training, (4) the seamless integration of AI-SaMD with healthcare software systems (e.g., electronic health records), and (5) the rigorous validation of AI-SaMD models to ensure effective implementation. Conclusions: This study offers valuable insights for diverse stakeholders, emphasizing the need to move beyond theoretical analyses and prioritize practical, experimental research to advance the real-world application of AI-SaMDs. This study concludes by outlining future research directions and emphasizing the limitations of the predominantly theoretical approaches currently available.

Malicious software (“malware”) has become one of the serious cybersecurity issues in Android ecosystem. Given the fast evolution of Android malware releases, it is practically not feasible to manually detect malware apps in the Android ecosystem. As a result, machine learning has become a fledgling approach for malware detection. Since machine learning performance is largely influenced by the availability of high quality and relevant features, feature selection approaches play key role in machine learning based detection of malware. In this paper, we formulate the feature selection problem as a quadratic programming problem and analyse how commonly used filter-based feature selection methods work with emphases on Android malware detection. We compare and contrast several feature selection methods along several factors including the composition of relevant features selected. We empirically evaluate the predictive accuracy of the feature subset selection algorithms and compare their predictive accuracy and the execution time using several learning algorithms. The results of the experiments confirm that feature selection is necessary for improving accuracy of the learning models as well decreasing the run time. The results also show that the performance of the feature selection algorithms vary from one learning algorithm to another and no one feature selection approach performs better than the other approaches all the time.

Every day, hundreds of thousands of new malware programs are developed and spread worldwide in cyberspace. Most of these malware programs are malware variants such as polymorphic and metamorphic malware, which are created from older versions of malware and able to change their structures and function flows to circumvent security solutions. The accuracy of malware variant detection is a crucial challenge. Many existing malware variant detections use static features extracted from the physical structure of malware file, such as opcodes and function flows. Unfortunately, the static features are subject to obfuscation and code shelling using simple obfuscation techniques. Although a malware variant can change its structure and function flows, it is widely believed that the malware variant cannot hide its malicious behavioral patterns during the runtime. Accordingly, dynamic, or behavioral analysis-based features were suggested by many studies to detect malware variants accurately. However, most of these studies are solely dependent on application-programmable interface calls (or API calls), which is not enough to accurately distinguish between malware and benign due to API-based obfuscation techniques. Therefore, a malware variant detection model that combines different behavioral activities can improve detection accuracy while reducing the false-negative rate. To this end, this study proposed a Deep-Ensemble and Multifaceted Behavioral Malware Variant Detection Model using Sequential Deep Learning and Extreme Gradient Boosting Techniques. Different behavioral features were extracted from the dynamic analysis environment. Then, a feature extraction algorithm that can automatically extract effective representative patterns has been designed and developed to extract the hidden representative features of the malware variants using a sequential deep learning model. These features have been fed into a developed extreme gradient boosting-based classifier for decision making. Extensive experiments have been carried out to validate the proposed scheme. The results were compared to the other related techniques in the field. The results show that the proposed model is reliable, as it improves the detection rate while reducing the false-negative rate.