- Görüntülenme 11
- İndirme 0
-
Google Akademik
-
DOI

| Yazarlar | Nisa Vuran Sarı Mehmet Acı Çiğdem İnan Acı |
| Tek Biçim Adres (URI) | https://hdl.handle.net/20.500.14114/8365 |
| Yayın Türü | Makale |
| Yayın Yılı | 2025 |
| DOI Adresi | 10.3390/app15094775 |
| Yayıncı | MDPI |
| Dergi Adı | Applied Sciences |
| Konu Başlıkları | yapay zeka |
| İndekslenen Platformlar | Web of Science |
As malware has become increasingly complex, advanced techniques have emerged to improve traditional detection systems. The increasing complexity of malware poses significant challenges in cybersecurity due to the inability of existing methods to understand detailed and contextual relationships in modern software behavior. Therefore, developing innovative detection frameworks that can effectively analyze and interpret these complex patterns has become critical. This work presents a novel framework integrating API call sequences and DLL information into a unified, graph-based representation to analyze malware behavior comprehensively. The proposed model generates initial embeddings using Node2Vec, which uses a random walk approach to understand structural relationships between nodes. Graph Attention Network (GAT) then enhances these initial embeddings, which utilizes attention mechanisms to incorporate contextual dependencies and enhance semantic representations. Finally, the enhanced embeddings are classified using Convolutional Neural Network (CNN) and Gated Recurrent Units (GRU)s, a custom hybrid CNN-GRU-3 deep learning-based model capable of effectively modeling sequential patterns. The dual role of GAT as a classifier and feature extractor is also analyzed to evaluate its impact on embedding quality and classification accuracy. Experimental results show that the proposed model achieves superior results with an accuracy rate of 0.9961 compared to state-of-the-art approaches such as ensemble learning and standalone GAT. This achievement highlights the framework’s ability to utilize contextual information for malware detection. The real-world dataset used provides a benchmark for future work, and this research lays a comprehensive foundation for advancing graph-based malware analysis.
- Fakülteler
- Mühendislik Fakültesi
- Bilgisayar Mühendisliği Bölümü
|
Eser Adı dc.title |
Windows Malware Detection via Enhanced Graph Representations with Node2Vec and Graph Attention Network |
|---|---|
|
Yazarlar dc.contributor.author |
Nisa Vuran Sarı |
|
Yazarlar dc.contributor.author |
Mehmet Acı |
|
Yazarlar dc.contributor.author |
Çiğdem İnan Acı |
|
Yayıncı dc.publisher |
MDPI |
|
Yayın Türü dc.type |
Makale |
|
Özet dc.description.abstract |
As malware has become increasingly complex, advanced techniques have emerged to improve traditional detection systems. The increasing complexity of malware poses significant challenges in cybersecurity due to the inability of existing methods to understand detailed and contextual relationships in modern software behavior. Therefore, developing innovative detection frameworks that can effectively analyze and interpret these complex patterns has become critical. This work presents a novel framework integrating API call sequences and DLL information into a unified, graph-based representation to analyze malware behavior comprehensively. The proposed model generates initial embeddings using Node2Vec, which uses a random walk approach to understand structural relationships between nodes. Graph Attention Network (GAT) then enhances these initial embeddings, which utilizes attention mechanisms to incorporate contextual dependencies and enhance semantic representations. Finally, the enhanced embeddings are classified using Convolutional Neural Network (CNN) and Gated Recurrent Units (GRU)s, a custom hybrid CNN-GRU-3 deep learning-based model capable of effectively modeling sequential patterns. The dual role of GAT as a classifier and feature extractor is also analyzed to evaluate its impact on embedding quality and classification accuracy. Experimental results show that the proposed model achieves superior results with an accuracy rate of 0.9961 compared to state-of-the-art approaches such as ensemble learning and standalone GAT. This achievement highlights the framework’s ability to utilize contextual information for malware detection. The real-world dataset used provides a benchmark for future work, and this research lays a comprehensive foundation for advancing graph-based malware analysis. |
|
Kayıt Giriş Tarihi dc.date.accessioned |
2025-12-19 |
|
Yayın Yılı dc.date.issued |
2025 |
|
Açık Erișim Tarihi dc.date.available |
2025-04-25 |
|
Dil dc.language.iso |
eng |
|
Konu Başlıkları dc.subject |
yapay zeka |
|
Atıf İçin Künye dc.identifier.citation |
Sarı, N. V., Acı, M., & Acı, Ç. İ. (2025). Windows Malware Detection via Enhanced Graph Representations with Node2Vec and Graph Attention Network. Applied Sciences, 15(9), 4775. https://doi.org/10.3390/app15094775 |
|
ISSN dc.identifier.issn |
2076-3417 |
|
İlk Sayfa dc.identifier.startpage |
1 |
|
Son Sayfa dc.identifier.endpage |
40 |
|
Dergi Adı dc.relation.journal |
Applied Sciences |
|
Dergi Sayısı dc.identifier.issue |
1 |
|
Dergi Cilt dc.identifier.volume |
15 |
|
Tek Biçim Adres (URI) dc.identifier.uri |
https://hdl.handle.net/20.500.14114/8365 |
|
DOI Numarası dc.identifier.doi |
10.3390/app15094775 |
|
İndekslenen Platformlar dc.source.database |
Web of Science |
-
PDF