Machine learning model for malware dynamic analysis

A computer-implemented method, comprising:

• analyzing a series of events contained in received data, the series of events comprising events that occur during the execution of a data object, and the series of events being analyzed to at least extract, from the series of events, one or more subsequences of events;
• determining, by a machine learning model, a classification for the received data, the machine learning model classifying the received data based at least on whether the one or more subsequences of events are malicious;
• and
• providing the classification indicative of whether the received data is malicious.

A non-transitory computer-readable storage medium including program code, which when executed by at least one data processor, cause operations comprising:

• analyzing a series of events contained in received data, the series of events comprising events that occur during the execution of a data object, and the series of events being analyzed to at least extract, from the series of events, one or more subsequences of events;
• determining, by a machine learning model, a classification for the received data, the machine learning model classifying the received data based at least on whether the one or more subsequences of events are malicious;
• and
• providing the classification indicative of whether the received data is malicious.

An apparatus, comprising:

• means for analyzing a series of events contained in received data, the series of events comprising events that occur during the execution of a data object, and the series of events being analyzed to at least extract, from the series of events, one or more subsequences of events;
• means for determining, by a machine learning model, a classification for the received data, the machine learning model classifying the received data based at least on whether the one or more subsequences of events are malicious;
• and
• means for providing the classification indicative of whether the received is malicious.