DeepRadar: A cyber-defence interceptor for early warning and defusing malware injection attacks

Javaheri, Danial, Chizari, Hassan ORCID: https://orcid.org/0000-0002-6253-1822, Fahmideh, Mahdi, Nadimi-Shahraki, Mohammad H. and Hur, Junbeom (2025) DeepRadar: A cyber-defence interceptor for early warning and defusing malware injection attacks. Knowledge-Based Systems, 331. p. 114830. doi:10.1016/j.knosys.2025.114830

Preview

Text 1524 Javaheri, D et al. (2025) DeepRadar - A cyber-defence interceptor for early warning and defusing.pdf - Published Version Available under License Creative Commons Attribution 4.0. Download (5MB) | Preview

Abstract

Malware injection attacks are among the most sophisticated and elusive threats in cybersecurity, characterised by their capacity for privilege escalation, obfuscation, and the ability to deceive antivirus software. This paper introduces a multi-layer architecture, featuring innovative deep neural networks, fast Fourier convolution, and association rule mining strategies, designed for the early detection and defusal of malware injection attacks. We then propose a proactive AI-enabled malware detection platform, DeepRadar, as a novel real-world defence mechanism. This early warning functionality capable of anticipating the attack a few cycles before occurrence represents a novel idea and unique approach to detecting malware injection attacks. The experimental results validate DeepRadar’s superior performance compared to not only previous related studies but also a standard benchmark of well-reputed antivirus applications under various scenarios and accredited datasets, including heavily obfuscated emerging malware variants and adversarial samples. It demonstrates higher Accuracy, F-score, ROC, and AUC metrics in early detection and classification of malware injection attacks while DeepRadar consumes significantly fewer system resources, including processor and memory during long-term scalable operation. The proposed early warning system succeeded in repelling up to 97.2% of attacks before malware could complete their malicious sequence. Lastly, the evaluation results were substantiated by formal statistical analysis using Friedman and Wilcoxon tests. The findings of this research and DeepRadar’s runtime scanner provide vital early warnings against stealthy malware and injection attacks, offering robust protection for sensitive systems and critical infrastructure.

Item Type:	Article
Article Type:	Article
Uncontrolled Keywords:	Deep learning; Early warning system; Fast Fourier convolution; Association rule mining; Malware detection
Subjects:	H Social Sciences > HD Industries. Land use. Labor > HD28 Management. Industrial Management > HD61 Risk in industry. Risk management Q Science > QA Mathematics > QA76 Computer software
Divisions:	Schools and Research Institutes > School of Business, Computing and Social Sciences
Depositing User:	Kamila Niekoraniec
Date Deposited:	10 Nov 2025 13:24
Last Modified:	26 Nov 2025 12:00
URI:	https://eprints.glos.ac.uk/id/eprint/15524

University Staff: Request a correction | Repository Editors: Update this record