AI RESEARCH
SeqShield: A Behavioral Analysis Approach to Uncover Rootkits
arXiv CS.LG
•
ArXi:2604.23812v1 Announce Type: cross Rootkits are among the most elusive types of malware, capable of bypassing traditional static analysis methods due to their metamorphic behavior. Signature-based detection techniques struggle against these threats, necessitating a shift toward dynamic analysis approaches. We propose SeqShield, a behavior-based rootkit detection approach designed specifically for the Windows OS, leveraging API call sequences for dynamic behavior analysis.