DeepRadar: A cyber-defence interceptor for early warning and defusing malware injection attacks

• Generating early warning signals to proactively prevent malware injection attacks, including zero-day and emerging variants. • Intercepting malware API and IRP calls deep within the operating system kernel. • Incorporating a multi-layer runtime scanner that tracks inter-process communications, repelling up to 97.2% of injection attacks with proven long-term durability. • Employing a deep neural network architecture enhanced by fast Fourier convolution and association rule mining, scalable to large malware datasets. • Demonstrating robustness against obfuscation, evasion, and adversarial conditions, consistently outperforming leading anti-virus programs and state-of-the-art studies in accuracy and efficiency. Malware injection attacks are among the most sophisticated and elusive threats in cybersecurity, characterised by their capacity for privilege escalation, obfuscation, and the ability to deceive antivirus software. This paper introduces a multi-layer architecture, featuring innovative deep neural networks, fast Fourier convolution , and association rule mining strategies, designed for the early detection and defusal of malware injection attacks. We then propose a proactive AI-enabled malware detection platform, DeepRadar , as a novel real-world defence mechanism. This early warning functionality capable of anticipating the attack a few cycles before occurrence represents a novel idea and unique approach to detecting malware injection attacks. The experimental results validate DeepRadar’s superior performance compared to not only previous related studies but also a standard benchmark of well-reputed antivirus applications under various scenarios and accredited datasets, including heavily obfuscated emerging malware variants and adversarial samples. It demonstrates higher Accuracy, F-score, ROC, and AUC metrics in early detection and classification of malware injection attacks while DeepRadar consumes significantly fewer system resources, including processor and memory during long-term scalable operation. The proposed early warning system succeeded in repelling up to 97.2% of attacks before malware could complete their malicious sequence. Lastly, the evaluation results were substantiated by formal statistical analysis using Friedman and Wilcoxon tests. The findings of this research and DeepRadar’s runtime scanner provide vital early warnings against stealthy malware and injection attacks, offering robust protection for sensitive systems and critical infrastructure.