Search papers, labs, and topics across Lattice.
This paper introduces an attention-based LSTM framework for early detection of AI-assisted ransomware by analyzing file system behavior. The model captures temporal dependencies in file operation sequences and uses attention to highlight critical ransomware indicators. Experiments using ransomware behavioral traces show the framework effectively distinguishes malicious activity early on with high detection performance and low false positives, while XAI techniques improve transparency.
Attention-based LSTMs, coupled with XAI, can spot AI-assisted ransomware early by pinpointing subtle, yet critical, file system behavioral patterns.
Ransomware continues to evolve as one of the most disruptive cyber threats, with recent variants increasingly leveraging automated and AI-assisted techniques to evade traditional signature-based defenses. Early detection of such attacks remains a significant challenge, particularly when malicious behavior closely resembles legitimate system activity. This study proposes an explainable attention-based Long Short-Term Memory (LSTM) framework for the early detection of AI assisted ransomware variants through analysis of file system behavioral patterns. The proposed model captures temporal dependencies in file operation sequences, while an attention mechanism highlights critical behavioral indicators associated with ransomware activity. To improve transparency and trust in automated detection systems, explainable artificial intelligence (XAI) techniques are incorporated to interpret model predictions and identify influential behavioral features. Experimental evaluation using ransomware behavioral traces demonstrates that the proposed framework can effectively distinguish malicious activity at early stages of execution with high detection performance and low false-positive rates. The findings suggest that combining sequence-aware deep learning models with explainability mechanisms can significantly enhance the reliability and interpretability of next-generation ransomware defense systems. This work contributes toward the development of intelligent and transparent cyber-defense mechanisms capable of addressing emerging AI-driven malware threats.
