返回
LEDA-Layered Event-Based Malware Detection Architecture
DOI:10.3390/s24196393.png)
摘要
En 中文
The rapid increase in new malware necessitates effective detection methods. While machine learning techniques have shown promise for malware detection, most research focuses on identifying malware through the content of executable files or full behavior logs collected from process start to finish. However, detecting threats like ransomware via full logs is redundant, as this malware type openly informs users of the infection. To address this, we present LEDA, a novel malware detection architecture designed to monitor process behavior during execution and to identify malicious actions in real time. LEDA dynamically learns the most relevant features for detection and optimally triggers model evaluations to minimize the performance impact perceived by users. We evaluated LEDA using a dataset of Windows malware and legitimate applications collected over a year, examining our model's temporal decay in effectiveness.
Keyword:
real-time malware detection
process behavior monitoring
machine learning
malware detection architecture
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.5
论文数:
7.2W
被引数:
20.9W
机构
引用论文
Machine Learning Algorithm for Malware Detection: Taxonomy, Current Challenges, and Future Directions
IEEE ACCESS
IF3.6
API-MalDetect: Automated malware detection framework for windows based on API calls and deep learning techniquesApi-mal检测: 基于API调用和深度学习技术的windows自动恶意软件检测框架

