arrow
Return

Explainable malware detection through integrated graph reduction and learning techniques

delete2025-08-19
delete0
delete
OA
AI
H
Hesamodin Mohammadian *
G
Griffin Higgins
S
Samuel Ansong
R
Roozbeh Razavi‐Far
A
Ali A. Ghorbani
DOI:10.1016/j.bdr.2025.100555delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Recently, Control Flow Graphs and Function Call Graphs have gain attention in malware detection task due to their ability in representation the complex structural and functional behavior of programs. To better utilize these representations in malware detection and improve the detection performance, they have been paired with Graph Neural Networks (GNNs). However, the sheer size and complexity of these graph representation poses a significant challenge for researchers. At the same time, a simple binary classification provided by the GNN models is insufficient for malware analysts. To address these challenges, this paper integrates novel graph reduction techniques and GNN explainability in to a malware detection framework to enhance both efficiency and interpretability. Through our extensive evolution, we demonstrate that the proposed graph reduction technique significantly reduces the size and complexity of the input graphs, while maintaining the detection performance. Furthermore, the extracted important subgraphs using the GNNExplainer, provide better insights about the model's decision and help security experts with their further analysis.
Keywords:
Malware detection
Control flow graph
Graph embedding
Graph reduction
Graph neural network
Explainability
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

Big Data Research cover
Big Data Research
IF:
4.2
Papers:
418
Citations:
1.1K

Organization

No organization information available
Cited Papers

Cited Papers

Graph Sparsification by Effective Resistances
err2011-01-01
err0
errOAAI
errDaniel A. Spielman; Nikhil Srivastava
errShare
errSave
Explainable Malware Detection System Using Transformers-Based Transfer Learning and Multi-Model Visual Representation
errSENSORS
IF3.5
err2022-09-07
err30
errOAAI
errUllah, Farhan; Alsirhani, Amjad; Alshahrani, Mohammed Mujib; Alomari, Abdullah; Naeem, Hamad; Shah, Syed Aziz
errShare
errSave
errShare
errSave
errShare
errSave
The Nepenthes Platform: An Efficient Approach to Collect Malware
err2006-01-01
err0
PREAI
errPaul Baecher; Markus Koetter; Thorsten Holz; Maximillian Dornseif; Felix Freiling
errShare
errSave
NetGist: Learning to Generate Task-Based Network Summaries
err2018-11-01
err0
PREAI
errSorour E. Amiri; Bijaya Adhikari; Aditya Bharadwaj; B. Aditya Prakash
errShare
errSave
researcher View more