Semantic Data Representation for Explainable Windows Malware Detection Models

arXiv:2403.11669v1 Announce Type: new
Abstract: Ontologies are a standard tool for creating semantic schemata in many knowledge intensive domains of human interest. They are becoming increasingly important also in the areas that have been until very recently dominated by subsymbolic knowledge representation and machine-learning (ML) based data processing. One such area is information security, and specifically, malware detection. We thus propose PE Malware Ontology that offers a reusable semantic schema for Portable Executable (PE - the Windows binary format) malware …

area arxiv cs.cr data data processing detection domains human important interest knowledge machine malware malware detection representation semantic standard tool windows windows malware