The rise of generative AI has created several scenarios where older technologies (or human intervention) can be replaced by an agent that relies on LLMs. In this paper, we evaluate if an LLM is suited for malware detection and in what scenarios. For this task, we compare 4 open source models [LLama2-13B, Mistral, Mixtral and Mixtral-FP16] using a set of 20000 malware and 20000 benign files for which we provide behavioral information as a list of API calls sequences. The goal is to identify scenarios where these types of models can be successfully used for malware detection.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Benchmarking Out of the Box Open-Source LLMs for Malware Detection Based on API Calls Sequences

  • Ciprian-Alin Simion,
  • Gheorghe Balan,
  • Dragoş Teodor Gavriluţ

摘要

The rise of generative AI has created several scenarios where older technologies (or human intervention) can be replaced by an agent that relies on LLMs. In this paper, we evaluate if an LLM is suited for malware detection and in what scenarios. For this task, we compare 4 open source models [LLama2-13B, Mistral, Mixtral and Mixtral-FP16] using a set of 20000 malware and 20000 benign files for which we provide behavioral information as a list of API calls sequences. The goal is to identify scenarios where these types of models can be successfully used for malware detection.