An Approach of Malware Detection in Power System

In recent years, cyber attacks against the power industry have occurred frequently, causing huge losses to national infrastructure construction. As an important carrier of network attacks, malware has a great threat to the power system. This paper proposes an E-Gemini model based on the analysis of binary executable files and traditional malware detection techniques. This model was developed by Gemini [1] and has a stronger analysis ability for malware in power systems. This paper also alleviates the problem of the small size of the current power system malware dataset by pretraining and retraining. Experiments have verified the effectiveness of the E-Gemini model. The results show that the proposed model can achieve a maximum accuracy of 89%, which is significantly improved compared to the baseline method.