Generative Adversarial Networks for Dynamic Malware Behavior: A Comprehensive Review, Categorization, and Analysis
This article highlights the critical role of machine learning (ML) in combating the dynamic nature of cybersecurity threats. Unlike previous studies focusing mainly on static analysis, this work surveys the literature on dynamic analysis-based malware generation and detection. The study addresses the complexities of applying GANs to tabular data with heavy-tailed and multimodal distributions. It also examines the challenges of generating sequential malware behavior data and categorizes GAN-based models and their primary use cases. Furthermore, the article evaluates adversarial losses and their limitations in generating dynamic malware behavior. Finally, it identifies existing metrics to assess GAN generalization in malware research and suggests future research directions based on identified limitations.
Authors
- Khouloud Eledlebi (ORCID: https://orcid.org/0000-0002-4355-4041)
- Martin Andreoni Lopez (ORCID: https://orcid.org/0000-0002-4170-4341)
- Chan Yeob Yeun (ORCID: https://orcid.org/0000-0002-1398-952X)
- Willian T. Lunardi (ORCID: https://orcid.org/0000-0003-0718-0019)
- Naveed Ilyas (ORCID: https://orcid.org/0000-0002-8220-4474)
- Ernesto Damiani (ORCID: https://orcid.org/0000-0002-9557-6496)
- Ghebrebrhan Weldit Gebrehans
Institutions
- University of California, Riverside (US)
- Khalifa University of Science and Technology (AE)
- Technology Innovation Institute (AE)
Publication Details
- Journal
- IEEE Transactions on Artificial Intelligence
- Published
- 2025-02-04
- DOI
- https://doi.org/10.1109/tai.2025.3537966
- Citations
- 8
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 11.88