English(EN) Behavioral Grammar: Detecting Adaptive Malware via Tiny Language Model Priors and Second-Order Temporal Analysis

行为语法：微型语言模型检测自适应恶意软件

作者 PulseAugur 编辑部 · [1 个来源] · 2026-09-10 04:00

研究人员开发了一种名为行为语法的新型恶意软件检测系统，该系统利用了一个名为TinyGPT的紧凑型0.88M参数因果Transformer模型。该系统将主机运行时行为视为一种结构化语言，将系统事件离散化为8个token的表示。通过以自监督方式学习正常行为的模式，行为语法从负对数似然统计中得出异常分数，旨在实现数学上有限的误报率。该系统针对自适应对抗代理（AAA）进行了测试，达到了93%的检测率和3.84%的误报率，其中事件间隔变化系数被证明是关键的区分信号。 AI

影响这项研究可能导致更强大、可审计的恶意软件检测系统，将规避成本转移给防御者。

排序理由该集群包含一篇详细介绍新型AI驱动的检测系统的学术论文。[lever_c_demoted from research: ic=1 ai=1.0]

在 arXiv cs.AI 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 13 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 该集群包含一篇详细介绍新型AI驱动的检测系统的学术论文。[lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: paper, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Breaking (< 6h); Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

arXiv cs.AI TIER_1 English(EN) · Zihan Luo · 2026-09-10 04:00

行为语法：通过微小语言模型先验和二阶时间分析检测自适应恶意软件

arXiv:2608.00745v2 Announce Type: replace Abstract: Modern endpoint detection systems face a fundamental tension: signature-based approaches are trivially evaded by polymorphic or adaptive threats, while heavy deep-learning models resist auditability and deployment at scale. This…

本文如何被排名

报道来源 [1]

行为语法：通过微小语言模型先验和二阶时间分析检测自适应恶意软件

相关实体

相关话题