Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models

arXiv:2403.12196v1 Announce Type: new
Abstract: The Gartner 2022 report predicts that 45% of organizations worldwide will encounter software supply chain attacks by 2025, highlighting the urgency to improve software supply chain security for community and national interests. Current malware detection techniques aid in the manual review process by filtering benign and malware packages, yet such techniques have high false-positive rates and limited automation support. Therefore, malware detection techniques could benefit from advanced, more automated approaches for accurate and minimally false-positive …

aid arxiv attacks community cs.ai cs.cr current detection ecosystem gartner language language models large lens malware malware detection national npm organizations process report review security software software supply chain software supply chain attacks software supply chain security supply supply chain supply chain attacks supply chain security techniques