{"id":35549,"date":"2025-03-06T17:51:45","date_gmt":"2025-03-06T16:51:45","guid":{"rendered":"https:\/\/kinit.sk\/project\/ema-explainable-malware-analysis\/"},"modified":"2025-03-10T16:03:06","modified_gmt":"2025-03-10T15:03:06","slug":"ema-explainable-malware-analysis","status":"publish","type":"project","link":"https:\/\/kinit.sk\/sk\/projekt\/ema-explainable-malware-analysis\/","title":{"rendered":"EMA: Explainable Malware Analysis"},"content":{"rendered":"
\n

EMA is a Recovery and Resilience Plan project aimed at explainable malware analysis.  KInIT collaborates with universities in Slovakia – Comenius University and Slovak University of Technology in Bratislava.<\/strong><\/p>\n<\/div>\n\n

\n

With the ever-increasing amounts of new malware samples appearing daily, artificial intelligence, especially machine learning methods, has gained prominence in malware analysis. These methods enable the processing of large volumes of data and achieve very high success rates in tasks like malware detection or classification. Still, their main disadvantage lies in their opaque nature: they cannot provide human-understandable justifications for their outputs. This is addressed by a new branch of research under the explainable AI initiative, which provides a number of methods to overcome this problem. The project’s overall objective is to enhance the applicability of XAI methodology in malware analysis.<\/p>\n<\/div>\n\n

\n

The project sets out to complete multiple tasks to accomplish the main objective. First, our partners at STU will create a complex malware data-gathering solution that is ready to utilise various malware analysis solutions to gather complex malware features, mainly arising from dynamic malware analysis. Afterward, an ontological representation will be created to support the usage of XAI methods later on. Alongside the creation of ontologies, data breakdown strategies will be used to reduce the dataset’s size. XAI methods will then be explored in the created dataset(s) to generate explanations for the task of malware detection. Quantitative and qualitative measures will then be used to evaluate the usefulness of generated explanations in practice.<\/p>\n<\/div>\n\n

\n

KInIT contributes to the EMA project in the following areas:<\/p>\n<\/div>\n\n

\n