arXiv:2601.06219cs.CRcs.AI2026-01被引 1

用AI融合多种分析方法,实现快速精准的恶意软件检测。

AI-Powered Algorithms for the Prevention and Detection of Computer Malware Infections

  • 结合静态分析、行为监测和上下文信息进行多层判断
  • 在EMBER和CIC-MalMem2022数据集上达97.3%准确率,误报率仅1.5%
  • 适合需要实时防护的网络安全系统开发者参考

恶意软件攻击频率与复杂度持续上升,传统基于特征码的检测手段已难奏效。本文提出一种基于人工智能的混合上下文感知恶意软件检测框架(HCAMDF),融合静态文件分析、动态行为分析与上下文元数据,构建多层架构。该框架采用轻量级静态分类器(如LSTM)实现实时行为分析,并通过集成多层预测实现综合风险评分。在EMBER与CIC-MalMem2022基准数据集上的实验表明,该方法准确率达97.3%,误报率仅为1.5%,检测延迟极低,优于现有主流机器学习与深度学习方法。结果证实,该混合AI方案能有效识别已知及新型恶意软件变种,为应对快速演变的威胁环境提供了可实时响应的智能安全基础。

原文摘要 · Abstract (English)

The rise in frequency and complexity of malware attacks are viewed as a major threat to modern digital infrastructure, which means that traditional signature-based detection methods are becoming less effective. As cyber threats continue to evolve, there is a growing need for intelligent systems to accurately and proactively identify and prevent malware infections. This study presents a new hybrid context-aware malware detection framework(HCAMDF) based on artificial intelligence (AI), which combines static file analysis, dynamic behavioural analysis, and contextual metadata to provide more accurate and timely detection. HCADMF has a multi-layer architecture, which consists of lightweight static classifiers such as Long Short Term Memory (LSTM) for real-time behavioral analysis, and an ensemble risk scoring through the integration of multiple layers of prediction. Experimental evaluations of the new/methodology with benchmark datasets, EMBER and CIC-MalMem2022, showed that the new approach provides superior performances with an accuracy of 97.3%, only a 1.5% false positive rate and minimal detection delay compared to several existing machine learning(ML) and deep learning(DL) established methods in the same fields. The results show strong evidence that hybrid AI can detect both existing and novel malware variants, and lay the foundation on intelligent security systems that can enable real-time detection and adapt to a rapidly evolving threat landscape.

恶意软件检测AI安全实时防护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。