SOURCE-LINKED INTELLIGENCE

Delphi Scanner: efficient and interpretable static malware detection via API sequence modeling

arXiv · AI, language, vision and robotics · article · Sep 17, 2026 · UTC

Static malware detection for Windows Portable Executable files demands a careful balance between detection effectiveness, computational efficiency, and analytical interpretability. This paper introduces Delphi Scanner, a static malware detection system for Windows PE files that balances efficiency with behavioral interpretation. It uses a convolutional neural network (CNN) to model Windows API sequences to classify PE and a decoupled interpretation layer based on a rule-based layer to categorize APIs into high-level malicious capabilities. Evaluated on over 190,000 Windows PE files, the system

Read original source ↗ Open in workspace

recordType

paper

region

Global