arrow
Return

Dynamic malware detection based on enhanced semantic API sequence features

delete2026-02-21
delete0
PRE
AI
陈志国 cover
陈志国 (Zhiguo Chen)
L
Lei Zhou
Q
Qingcheng Liu
W
Weizhi Meng
J
Jian Weng
DOI:10.1016/j.eswa.2026.131781delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Dynamic malicious software detection aims to assess whether executable programs exhibit malicious behavior by thoroughly studying and analyzing their dynamic features. However, many current methodologies insufficiently explore the semantic features of API sequences and instead rely more on mining parameter information during API call processes to enhance detection performance. This leads to issues such as excessive dependence on prior knowledge, larger model parameter sizes, and higher computational complexities. To that end, this paper proposes an enhanced semantic API sequence feature dynamic malware detection scheme that integrates the RoBERTa pre-training model and gating mechanism. This scheme solely leverages API call sequences that can comprehensively capture the contextual semantic information implicitly embedded during executable file execution. Meanwhile, dynamically adjusting the weights of various modal features within the model enhances sensitivity to different malicious software samples. By fusing multidimensional features, our approach comprehensively captures both the semantic and global characteristics of API sequences, enabling the model to adapt more flexibly to malware variants and thereby improving detection accuracy and robustness. Extensive experiments on four publicly available datasets demonstrate that the proposed method consistently achieves higher detection accuracy and strong generalization across different datasets and task types, including both binary and multi-class classification, thereby validating its effectiveness and practical applicability in dynamic malware detection.
Keywords:
API sequence
semantic features
dynamic malware detection
RoBERTa
gating mechanism

Journal

Expert Systems with Applications cover
Expert Systems with Applications
IF:
7.5
Papers:
2.9W
Citations:
10.2W

Organization

L
lancaster university
Scholars:
1.3K
Papers: 905
Citations: 0
J
jinan university
Scholars:
4.2W
Papers: 2.6W
Citations: 38
N
Nanjing University of Information Science and Technology
Scholars:
2.6K
Papers: 1.1K
Citations: 1.7W
researcher View more organizations