An Explainable Method for Malware Detection Through Convolutional Neural Networks

doi:10.1007/978-3-032-00630-1_18

An Explainable Method for Malware Detection Through Convolutional Neural Networks

2026-01-01

0

PRE

AI

DOI：10.1007/978-3-032-00630-1_18

Original

Original request for help

Save

Abstract

En 中文

Considering that current antimalware, typically based on signature-based approaches, are not able to identify threats whose signatures are not present in the antiviral database, in this paper we propose a method to identify malware based on deep learning, in particular on convolutional neural networks to identify whether an application is malicious. A distinctive feature of the proposed method is the ability to explain the reasons why the classifier predicts whether an application is malware or trusted, in fact in addition to the binary prediction, the proposed method is able to select the opcodes of the identified application that according to the model are symptomatic of the malicious behavior, thus providing a kind of explainability. Experimental results have shown satisfactory results, thus demonstrating the effectiveness of the proposed method.

Keywords:

Malware

Deep Learning

Convolutional Neural Network

Explainability

Security

An Explainable Method for Malware Detection Through Convolutional Neural Networks

Abstract

Journal

Organization