Survey of Machine Learning Techniques for Malware Analysis
Not on the map. Why?
Abstract (arXiv)
Coping with malware is getting more and more challenging, given their relentless growth in complexity and volume. One of the most common approaches in literature is using machine learning techniques, to automatically learn models and patterns behind such complexity, and to develop technologies to keep pace with malware evolution. This survey aims at providing an overview on the way machine learning has been used so far in the context of malware analysis in Windows environments, i.e. for the analysis of Portable Executables. We systematize surveyed papers according to their objectives (i.e., the expected output), what information about malware they specifically use (i.e., the features), and what machine learning techniques they employ (i.e., what algorithm is used to process the input and produce the output). We also outline a number of issues and challenges, including those concerning the used datasets, and identify the main current topical trends and how to possibly advance them. In particular, we introduce the novel concept of malware analysis economics, regarding the study of existing trade-offs among key metrics, such as analysis accuracy and economical costs.
Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). First posted on arXiv 23 Oct 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 10; 2023: 7; 2024: 3; 2025: 4.
31 papers.
Sort:
- 2021The Threat of Offensive AI to Organizationscited by 37
- 2021A Survey on Machine Learning Techniques for Source Code Analysiscited by 23
- 2022The Role of Machine Learning in Cybersecuritycited by 21
- 2021Deep Learning for Android Malware Defenses: a Systematic Literature Reviewcited by 18
- 2021Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Artcited by 18
- 2022On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attackscited by 15
- 2023SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detectioncited by 13
- 2022MERLIN -- Malware Evasion with Reinforcement LearnINgcited by 10
- 2022Quo Vadis: Hybrid Machine Learning Meta-Model based on Contextual and Behavioral Malware Representationscited by 9
- 2022AI-based Malware and Ransomware Detection Modelscited by 7
- 2024Combating Concept Drift with Explanatory Detection and Adaptation for Android Malware Classificationcited by 7
- 2021An Ensemble of Pre-trained Transformer Models For Imbalanced Multiclass Malware Classificationcited by 5
19 more
- 2023AVScan2Vec: Feature Learning on Antivirus Scan Data for Production-Scale Malware Corporacited by 5
- 2023Efficient Concept Drift Handling for Batch Android Malware Detection Modelscited by 5
- 2023Change Management using Generative Modeling on Digital Twinscited by 4
- 2021A Comprehensive Study on Learning-Based PE Malware Family Classification Methodscited by 3
- 2023Creating Valid Adversarial Examples of Malwarecited by 3
- 2024Deep Multi-Task Learning for Malware Image Classificationcited by 3
- 2024KiNETGAN: Enabling Distributed Network Intrusion Detection through Knowledge-Infused Synthetic Data Generationcited by 3
- 2023A Survey on Cross-Architectural IoT Malware Threat Huntingcited by 2
- 2025Evaluating the Potential of Quantum Machine Learning in Cybersecurity: A Case-Study on PCA-based Intrusion Detection Systemscited by 2
- 2025Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corporacited by 2
- 2022Parallel Instance Filtering for Malware Detectioncited by 1
- 2021Using Static and Dynamic Malware features to perform Malware Ascriptioncited by 0
- 2022Malware Analysis with Symbolic Execution and Graph Kernelcited by 0
- 2022On the impact of dataset size and class imbalance in evaluating machine-learning-based windows malware detection techniquescited by 0
- 2022Classification of Web Phishing Kits for early detection by platform providerscited by 0
- 2022Clustering based opcode graph generation for malware variant detectioncited by 0
- 2023Case Study-Based Approach of Quantum Machine Learning in Cybersecurity: Quantum Support Vector Machine for Malware Classification and Protectioncited by 0
- 2025Imbalanced malware classification: an approach based on dynamic classifier selectioncited by 0
- 2025LLM-Generated Samples for Android Malware Detectioncited by 0
- 2025Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora17 Nov 2025
- 2025LLM-Generated Samples for Android Malware Detection30 Sep 2025
- 2025Imbalanced malware classification: an approach based on dynamic classifier selection30 Mar 2025
- 2025Evaluating the Potential of Quantum Machine Learning in Cybersecurity: A Case-Study on PCA-based Intrusion Detection Systems16 Feb 2025
- 2024KiNETGAN: Enabling Distributed Network Intrusion Detection through Knowledge-Infused Synthetic Data Generation26 May 2024
- 2024Deep Multi-Task Learning for Malware Image Classification9 May 2024
- 2024Combating Concept Drift with Explanatory Detection and Adaptation for Android Malware Classification7 May 2024
- 2023Change Management using Generative Modeling on Digital Twins21 Sep 2023
- 2023Efficient Concept Drift Handling for Batch Android Malware Detection Models18 Sep 2023
- 2023Creating Valid Adversarial Examples of Malware23 Jun 2023
- 2023A Survey on Cross-Architectural IoT Malware Threat Hunting9 Jun 2023
- 2023AVScan2Vec: Feature Learning on Antivirus Scan Data for Production-Scale Malware Corpora9 Jun 2023
19 more
- 2023Case Study-Based Approach of Quantum Machine Learning in Cybersecurity: Quantum Support Vector Machine for Malware Classification and Protection1 Jun 2023
- 2023SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detection30 Apr 2023
- 2022Clustering based opcode graph generation for malware variant detection18 Nov 2022
- 2022Classification of Web Phishing Kits for early detection by platform providers15 Oct 2022
- 2022Quo Vadis: Hybrid Machine Learning Meta-Model based on Contextual and Behavioral Malware Representations20 Aug 2022
- 2022AI-based Malware and Ransomware Detection Models5 Jul 2022
- 2022Parallel Instance Filtering for Malware Detection28 Jun 2022
- 2022The Role of Machine Learning in Cybersecurity20 Jun 2022
- 2022On the impact of dataset size and class imbalance in evaluating machine-learning-based windows malware detection techniques13 Jun 2022
- 2022Malware Analysis with Symbolic Execution and Graph Kernel12 Apr 2022
- 2022MERLIN -- Malware Evasion with Reinforcement LearnINg24 Mar 2022
- 2022On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks7 Feb 2022
- 2021An Ensemble of Pre-trained Transformer Models For Imbalanced Multiclass Malware Classification25 Dec 2021
- 2021Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art23 Dec 2021
- 2021Using Static and Dynamic Malware features to perform Malware Ascription5 Dec 2021
- 2021A Comprehensive Study on Learning-Based PE Malware Family Classification Methods29 Oct 2021
- 2021A Survey on Machine Learning Techniques for Source Code Analysis18 Oct 2021
- 2021The Threat of Offensive AI to Organizations30 Jun 2021
- 2021Deep Learning for Android Malware Defenses: a Systematic Literature Review9 Mar 2021
- 2021The Threat of Offensive AI to Organizationscited by 37
- 2021A Survey on Machine Learning Techniques for Source Code Analysiscited by 23
- 2022The Role of Machine Learning in Cybersecuritycited by 21
- 2021Deep Learning for Android Malware Defenses: a Systematic Literature Reviewcited by 18
- 2021Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Artcited by 18
- 2022On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attackscited by 15
- 2023SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detectioncited by 13
- 2022MERLIN -- Malware Evasion with Reinforcement LearnINgcited by 10
- 2022Quo Vadis: Hybrid Machine Learning Meta-Model based on Contextual and Behavioral Malware Representationscited by 9
- 2022AI-based Malware and Ransomware Detection Modelscited by 7
- 2024Combating Concept Drift with Explanatory Detection and Adaptation for Android Malware Classificationcited by 7
- 2021An Ensemble of Pre-trained Transformer Models For Imbalanced Multiclass Malware Classificationcited by 5
12 most cited of 31 All 31 (JSON)
- 2025Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora17 Nov 2025
- 2025LLM-Generated Samples for Android Malware Detection30 Sep 2025
- 2025Imbalanced malware classification: an approach based on dynamic classifier selection30 Mar 2025
- 2025Evaluating the Potential of Quantum Machine Learning in Cybersecurity: A Case-Study on PCA-based Intrusion Detection Systems16 Feb 2025
- 2024KiNETGAN: Enabling Distributed Network Intrusion Detection through Knowledge-Infused Synthetic Data Generation26 May 2024
- 2024Deep Multi-Task Learning for Malware Image Classification9 May 2024
- 2024Combating Concept Drift with Explanatory Detection and Adaptation for Android Malware Classification7 May 2024
- 2023Change Management using Generative Modeling on Digital Twins21 Sep 2023
- 2023Efficient Concept Drift Handling for Batch Android Malware Detection Models18 Sep 2023
- 2023Creating Valid Adversarial Examples of Malware23 Jun 2023
- 2023A Survey on Cross-Architectural IoT Malware Threat Hunting9 Jun 2023
- 2023AVScan2Vec: Feature Learning on Antivirus Scan Data for Production-Scale Malware Corpora9 Jun 2023
12 newest of 31 All 31 (JSON)