Vincent Cohadon

Delphi Scanner: efficient and interpretable static malware detection via API sequence modeling

Delphi Scanner is introduced, a static malware detection system for Windows PE files that balances efficiency with behavioral interpretation that uses a convolutional neural network to model Windows API sequences to classify PE and a decoupled interpretation layer based on a rule-based layer to categorize APIs into hig...