Learning of malicious behavior vocabulary and threat detection through behavior matching

A system specialized for training a neural network comprising:

• one or more network interfaces to communicate with a network;
• one or more processors coupled to the network interfaces;
• and
• a memory comprising a plurality of storage locations that are addressable by the one or more processors;
• wherein a first storage location includes program instructions interpretable by the one or more processors;
• and wherein a second storage location includes a data structure interpretable as set of pre-defined weights and a third storage location includes a data structure interpretable as a second set of weights;
• and
• wherein the one or more processors interpret the program instructions and performs operations including:
• associating the first set of pre-defined weights with a first set of neurons within a neural network model, and associating the second set of weights with a second set of neurons of the neural network model;
• performing a training procedure on the neural network model, wherein the training procedure includes excluding the first set of pre-defined weights associated with a first set of neurons from updating during the training while updating the second set of weights;
• and
• storing the second set of weights in the third storage location.