VOLTRON: Detecting Unknown Malware Using Graph-Based Zero-Shot Learning
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915373331251200 |
|---|---|
| author | Akdeniz, M. Tahir Yeşilkaya, Zeynep Köse, İ. Enes Ünal, İ. Ulaş Şen, Sevil |
| author_facet | Akdeniz, M. Tahir Yeşilkaya, Zeynep Köse, İ. Enes Ünal, İ. Ulaş Şen, Sevil |
| contents | The persistent threat of Android malware presents a serious challenge to the security of millions of users globally. While many machine learning-based methods have been developed to detect these threats, their reliance on large labeled datasets limits their effectiveness against emerging, previously unseen malware families, for which labeled data is scarce or nonexistent.
To address this challenge, we introduce a novel zero-shot learning framework that combines Variational Graph Auto-Encoders (VGAE) with Siamese Neural Networks (SNN) to identify malware without needing prior examples of specific malware families. Our approach leverages graph-based representations of Android applications, enabling the model to detect subtle structural differences between benign and malicious software, even in the absence of labeled data for new threats.
Experimental results show that our method outperforms the state-of-the-art MaMaDroid, especially in zero-day malware detection. Our model achieves 96.24% accuracy and 95.20% recall for unknown malware families, highlighting its robustness against evolving Android threats. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2507_04275 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | VOLTRON: Detecting Unknown Malware Using Graph-Based Zero-Shot Learning Akdeniz, M. Tahir Yeşilkaya, Zeynep Köse, İ. Enes Ünal, İ. Ulaş Şen, Sevil Cryptography and Security Artificial Intelligence Machine Learning 68T05, 68M25 D.4.6; I.2.6; K.6.5 The persistent threat of Android malware presents a serious challenge to the security of millions of users globally. While many machine learning-based methods have been developed to detect these threats, their reliance on large labeled datasets limits their effectiveness against emerging, previously unseen malware families, for which labeled data is scarce or nonexistent. To address this challenge, we introduce a novel zero-shot learning framework that combines Variational Graph Auto-Encoders (VGAE) with Siamese Neural Networks (SNN) to identify malware without needing prior examples of specific malware families. Our approach leverages graph-based representations of Android applications, enabling the model to detect subtle structural differences between benign and malicious software, even in the absence of labeled data for new threats. Experimental results show that our method outperforms the state-of-the-art MaMaDroid, especially in zero-day malware detection. Our model achieves 96.24% accuracy and 95.20% recall for unknown malware families, highlighting its robustness against evolving Android threats. |
| title | VOLTRON: Detecting Unknown Malware Using Graph-Based Zero-Shot Learning |
| topic | Cryptography and Security Artificial Intelligence Machine Learning 68T05, 68M25 D.4.6; I.2.6; K.6.5 |
| url | https://arxiv.org/abs/2507.04275 |