Return
Explainable malware detection through integrated graph reduction and learning techniques
DOI:10.1016/j.bdr.2025.100555.png)
Abstract
En 中文
Recently, Control Flow Graphs and Function Call Graphs have gain attention in malware detection task due to their ability in representation the complex structural and functional behavior of programs. To better utilize these representations in malware detection and improve the detection performance, they have been paired with Graph Neural Networks (GNNs). However, the sheer size and complexity of these graph representation poses a significant challenge for researchers. At the same time, a simple binary classification provided by the GNN models is insufficient for malware analysts. To address these challenges, this paper integrates novel graph reduction techniques and GNN explainability in to a malware detection framework to enhance both efficiency and interpretability. Through our extensive evolution, we demonstrate that the proposed graph reduction technique significantly reduces the size and complexity of the input graphs, while maintaining the detection performance. Furthermore, the extracted important subgraphs using the GNNExplainer, provide better insights about the model's decision and help security experts with their further analysis.
Keywords:
Malware detection
Control flow graph
Graph embedding
Graph reduction
Graph neural network
Explainability
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
4.2
Papers:
418
Citations:
1.1K
Organization
No organization information available
Cited Papers
Explainable Malware Detection System Using Transformers-Based Transfer Learning and Multi-Model Visual Representation
SENSORS
IF3.5

