LLMs enhance malware detection by analyzing behavioral reports, outperforming static methods.

Researchers have developed Trident, a new system that enhances malware detection by integrating large language models (LLMs) with behavioral analysis. Unlike traditional methods relying on static features, Trident processes semi-structured sandbox behavior reports using LLMs to generate robust, concept-drift-resistant detection rules. The system combines these LLM-derived rules with a classic decision tree model and direct LLM analysis of sandbox outputs, outperforming existing static-feature and behavior-based approaches. AI

影响 Enhances malware detection robustness against concept drift by leveraging LLMs for behavioral analysis.

排序理由 Academic paper introducing a new system for malware detection using LLMs and behavioral features.

在 arXiv cs.LG 阅读 →

• arXiv
• LLMs
• PE malware
• Trident

• 论文
• 安全

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →