The ability to stop malware as soon as they start spreading will always play an important role in defending computer systems. It must be a huge benefit for organizations as well as society if intelligent defense systems could themselves detect and prevent new types of malware as soon as they reveal only a tiny amount of samples. An approach introduced in this paper takes advantage of One-shot/Few-shot learning algorithms to solve the malware classification problems using a Memory Augmented Neural Network in combination with the Natural Language Processing techniques such as word2vec, n-gram. We embed the malware’s API calls, which are very valuable sources of information for identifying malware’s behaviors, in the different feature spaces, and then feed them to the one-shot/few-shot learning models. Evaluating the model on the two datasets (FFRI 2017 and APIMDS) shows that the models with different parameters could yield high accuracy on malware classification with only a few samples. For example, on the APIMDS dataset, it was able to guess 78.85% correctly after seeing only nine malware samples and 89.59% after fine-tuning with a few other samples. The results confirmed very good accuracies compared to the other traditional methods, and point to a new area of malware research.

Malware is becoming an effective support tool not only for professional hackers but also for amateur ones. Due to the support of free malware generators, anyone can easily create various types of malicious code. The increasing amount of novel malware is a daily global problem. Current machine learning-based methods, especially image-based malware classification approaches, are attracting significant attention because of their accuracy and computational cost. Convolutional Neural Networks are widely applied in malware classification; however, CNN needs a deep architecture and GPUs for parallel processing to achieve high performance. By contrast, a simple model merely contained a Multilayer Perceptron called MLP-mixer with fewer hyperparameters that can run in various environments without GPUs and is not too far behind CNN in terms of performance. In this study, we try applying an Autoencoder (AE) to improve the performance of the MLP-mixer. AE is widely used in several applications as dimensionality reduction to filter out the noise and identify crucial elements of the input data. Taking this advantage from AE, we propose a lightweight ensemble architecture by combining a customizer MLP-mixer and Autoencoder to refine features extracted from the MLP-mixer with the encoder-decoder architecture of the autoencoder. We achieve overperformance through various experiments compared to other cutting-edge techniques using Malimg and Malheur datasets which contain 9939 (25 malware families) and 3133 variant samples (24 malware families).

Statistical algorithms using particle filters have been proposed previously for collaborative multi-robot localization. In these algorithms, by synchronizing each robot's belief or exchanging the particles of the robots, fast and accurate localization is attained. However, there algorithms assume correct recognition of other robots and the effects of recognition error are not considered. If the recognition of other robots is incorrect, a large amount of error in localization can occur. This paper describes this problem. Furthermore, in order to cope with the problem, an algorithm for collaborative multi-robot localization is proposed. In the proposed algorithm, the particles of a robot are exchanged with those of other robots according to measurement results obtained by the sending robot. At the same time, some particles remain in the sending robot. Received particles from other robots are evaluated using measurement results obtained by the receiving robot. The proposed method copes with recognition error by using the remaining particles, and increases the accuracy of estimation by twice evaluating the exchanged particles of the sending and receiving robots. These properties of the proposed method are argued mathematically. Simulation results show that incorrect recognition of other robots does not cause serious problems in the proposed method.