Artificial Intelligence in Malware and Network Intrusion Detection: A Comprehensive Survey of Techniques, Datasets, Challenges, and Future Directions

As cyber threats evolve in complexity and scale, traditional detection mechanisms are increasingly inadequate. This paper presents a comprehensive survey of artificial intelligence (AI) applications in malware and network intrusion detection, emphasizing the integration of intelligent techniques for real-time threat mitigation. We categorize state-of-the-art methods across supervised, unsupervised, and reinforcement learning, including deep learning architectures such as CNNs, RNNs, LSTMs, and ensemble models. Static, dynamic, and hybrid analysis techniques are compared, with a focus on feature engineering, behavioral modeling, and real-world deployment constraints. A novel AI-based Malware Detection and Prevention Framework is proposed, combining machine learning classifiers with Network Intrusion Prevention Systems (NIPS) to enhance proactive defense capabilities. The study evaluates publicly available and synthetic datasets, addressing challenges such as class imbalance, adversarial evasion, and data scarcity. We also highlight ethical considerations including bias, privacy, and accountability in AI-enabled cybersecurity systems. Case studies from mobile and IoT ecosystems demonstrate the practicality and limitations of AI-based defenses in dynamic threat landscapes. Finally, the paper outlines future research directions in explainable AI, automated model generation (AutoML), and adaptive, context-aware intrusion prevention systems. This work serves as a critical resource for developing resilient, scalable, and intelligent cybersecurity infrastructures aligned with modern digital ecosystems

Authors

Institutions

Publication Details

Journal
Babylonian Journal of Artificial Intelligence
Published
2025-06-13
DOI
https://doi.org/10.58496/bjai/2025/008
Citations
11
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
14.87

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Artificial Intelligence in Malware and Network Intrusion Detection: A Comprehensive Survey of Techniques, Datasets, Challenges, and Future Directions

Rabee Naser, Rusul Mansoor Al-Amri, Ahmed Dheyaa Radhi, M. K. Abdulhameed et al.
11 citations
Babylonian Journal of Artificial Intelligence
Network Security and Intrusion Detection
14.87
article

Artificial Intelligence in Malware and Network Intrusion Detection: A Comprehensive Survey of Techniques, Datasets, Challenges, and Future Directions

Rabee Naser, Rusul Mansoor Al-Amri, Ahmed Dheyaa Radhi, M. K. Abdulhameed, Saif A. H. Moamin, Liaw Geok Pheng
article en
11 citations

Abstract

As cyber threats evolve in complexity and scale, traditional detection mechanisms are increasingly inadequate. This paper presents a comprehensive survey of artificial intelligence (AI) applications in malware and network intrusion detection, emphasizing the integration of intelligent techniques for real-time threat mitigation. We categorize state-of-the-art methods across supervised, unsupervised, and reinforcement learning, including deep learning architectures such as CNNs, RNNs, LSTMs, and ensemble models. Static, dynamic, and hybrid analysis techniques are compared, with a focus on feature engineering, behavioral modeling, and real-world deployment constraints. A novel AI-based Malware Detection and Prevention Framework is proposed, combining machine learning classifiers with Network Intrusion Prevention Systems (NIPS) to enhance proactive defense capabilities. The study evaluates publicly available and synthetic datasets, addressing challenges such as class imbalance, adversarial evasion, and data scarcity. We also highlight ethical considerations including bias, privacy, and accountability in AI-enabled cybersecurity systems. Case studies from mobile and IoT ecosystems demonstrate the practicality and limitations of AI-based defenses in dynamic threat landscapes. Finally, the paper outlines future research directions in explainable AI, automated model generation (AutoML), and adaptive, context-aware intrusion prevention systems. This work serves as a critical resource for developing resilient, scalable, and intelligent cybersecurity infrastructures aligned with modern digital ecosystems

Babylonian Journal of Artificial IntelligenceVol. 2025
Technical University of Malaysia Malacca (MY), University of Kerbala (IQ)
University of Kerbala
Openalex Percentile: Top 1%
Network Security and Intrusion Detection
14.87
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.