DawnGNN: Documentation augmented Windows malware detection using graph neural network
Published in Computers & Security, 2024
We introduce DawnGNN, a novel Windows malware detection framework leveraging official API documentation and graph neural networks. It converts API sequences into graphs, encodes API descriptions using BERT, and employs a Graph Attention Network for detection. Tested on three datasets, DawnGNN demonstrates enhanced detection capabilities, showcasing the value of API documentation in malware analysis.
Recommended citation: Pengbin Feng, Le Gai, Li Yang, Qin Wang, Teng Li, Ning Xi, Jianfeng Ma. " DawnGNN: Documentation augmented Windows malware detection using graph neural network." Computers & Security. 2024: 103788.
Download Paper