Malware detection and mitigation system and method therefor

A system, comprising:

• a processor;
• and
• a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, that when executed by the processor, causes the processor to:
• extracts strings component-based features from attack-channel free software, the strings component-based features are component-based features that are specific to independent components of byte reset software with unmapped bytes reset, the reset unmapped bytes in the byte reset software being configured to reduce adversarial attacks;
• extracts monotonic features from the attack-channel free software, the monotonic features being features in the byte reset software;
• generates a count vector to represent the strings component-based features;
• graphically encodes the strings component-based features to generate graphically-encoded component-based features utilizing a graph attention network;
• and
• utilizes the graphically-encoded strings component-based features and the monotonic features to detect malware in a malware detection system.

A system, comprising:

• a processor;
• and
• a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, that when executed by the processor, causes the processor to:
• partition byte reset software, ascertained during a process of removing an attack channel from software, into a plurality of sections;
• scan the plurality of sections of the byte-reset software for string component-based features;
• and
• utilize the string component-based features to detect mutating malware, the strings component-based features having been graphically encoded.