SOURCE-LINKED INTELLIGENCE

A TTP by TTP Approach: Precise Malware Detection via Malicious TTP Recognition

arXiv · AI, language, vision and robotics · article · Sep 6, 2026 · UTC

Machine learning methods, and especially neural networks, are now routinely used for malware detection in network traffic. Though very effective, systems based on such methods often (i) are purely data-driven, ignoring the substantial body of available knowledge about the tactics, techniques, and procedures (TTPs) possibly used, and, consequently (ii) are not precise, since they either cannot correlate malicious activity with TTP usage, or if they do, they are unable to explain which TTP has been maliciously used. In this paper we demonstrate that it is possible to precisely detect malware by

Read original source ↗ Open in workspace

recordType

paper

region

Global