{
  "abstract": "In recent years, malicious software (malware) has remained a persistent and evolving threat, affecting both personal and organizational devices across diverse computing environments. This article presents a systematic review of recent progress in malware analysis over the past 5 years, with particular emphasis on benchmark datasets, traffic-oriented detection settings, deep learning methods, and explainable artificial intelligence (XAI) approaches. Representative benchmark resources discussed in the reviewed literature include CIC IoMT 2024, CIC-MalMem-2022, and CICMalDroid 2020, which reflect different malware-analysis contexts such as IoMT/network traffic, memory-based Windows malware behavior, and Android malware analysis. The review examines how prior studies characterize malicious behaviors, evaluate detection paradigms, and employ interpretability techniques such as Local Interpretable Model-Agnostic Explanations (LIME) and Shapley Additive Explanations (SHAP) to improve model transparency and analyst understanding. In addition to summarizing the practical strengths of these approaches, the article discusses current limitations related to interpretability overhead, dataset dependence, scalability, and deployment constraints. The review concludes by identifying major research gaps and outlining future directions for building more scalable, explainable, and trustworthy malware-analysis systems.",
  "abstract_shown": true,
  "affiliations": [
    "Department of Computer Science, Wenzhou Kean University, Wenzhou, China.",
    "Department of Accounting, Wenzhou Kean University, Wenzhou, China.",
    "Department of Computer Science, Al-Imam Mohamed Ibn Saud Islamic University, Riyadh, Saudi Arabia.",
    "Cybersecurity Center, Prince Mohammad Bin Fahd University, Dhahran, Saudi Arabia.",
    "Department of Electrical Engineering Computer Science, Embry-Riddle Aeronautical University, Daytona Beach, FL, United States."
  ],
  "article_type": "research article",
  "arxiv": null,
  "author_total": 9,
  "authors": [
    {
      "affs": [
        0
      ],
      "name": "Bowen Yu"
    },
    {
      "affs": [
        0
      ],
      "name": "Wanting Zhang"
    },
    {
      "affs": [
        1
      ],
      "name": "Yishen Liu"
    },
    {
      "affs": [
        2
      ],
      "name": "Awais Ahmad"
    },
    {
      "affs": [
        2
      ],
      "name": "Waeal J Obidallah",
      "orcid": "0000-0002-5086-3950"
    },
    {
      "affs": [
        2
      ],
      "name": "Yousef Ahmed Alduraywish"
    },
    {
      "affs": [
        3
      ],
      "name": "Farhan Ullah",
      "orcid": "0000-0002-1030-1275"
    },
    {
      "affs": [
        4
      ],
      "name": "Kenji Yoshigoe"
    },
    {
      "affs": [
        0
      ],
      "name": "Yue Zhao"
    }
  ],
  "bibtex": "https://research.draconitic.com/paper/9rxzarhrnt9ss.bib",
  "cited_by": 0,
  "doi": "10.7717/peerj-cs.3902",
  "fulltext_url": "https://europepmc.org/articles/PMC13716350",
  "id": "9rxzarhrnt9ss",
  "issns": [
    "2167-9843",
    "2376-5992"
  ],
  "landing_url": "https://europepmc.org/article/MED/42953517",
  "language": "eng",
  "licence": "CC-BY",
  "licence_label": "CC BY",
  "licence_source": "article",
  "licence_url": "https://creativecommons.org/licenses/by/4.0/",
  "metadata_licence": null,
  "native_subjects": [
    [
      "heading",
      "Artificial Intelligence"
    ],
    [
      "heading",
      "Computer Networks and Communications"
    ],
    [
      "heading",
      "Data Mining and Machine Learning"
    ],
    [
      "heading",
      "Security and Privacy"
    ],
    [
      "heading",
      "Software Engineering"
    ],
    [
      "openalex",
      "1711|Advanced Malware Detection Techniques"
    ]
  ],
  "openalex": "W7162455920",
  "pdf_url": "https://europepmc.org/articles/PMC13716350?pdf=render",
  "pmcid": "PMC13716350",
  "pmid": "42953517",
  "published": "2026-05-26",
  "publisher": "PeerJ, Inc",
  "ris": "https://research.draconitic.com/paper/9rxzarhrnt9ss.ris",
  "sources": [
    {
      "first_seen": "2026-10-31T00:20:43Z",
      "native_id": "MED:42953517",
      "source": "europepmc",
      "url": "https://europepmc.org/article/MED/42953517"
    },
    {
      "first_seen": "2026-11-01T12:23:22Z",
      "native_id": "PMC13716350",
      "source": "pmc",
      "url": "https://doi.org/10.7717/peerj-cs.3902"
    }
  ],
  "subjects": [],
  "title": "Explainable AI for malware analysis: a systematic review of benchmark datasets, traffic-oriented detection, and interpretability methods.",
  "title_text": "Explainable AI for malware analysis: a systematic review of benchmark datasets, traffic-oriented detection, and interpretability methods.",
  "type": "peer-reviewed",
  "updated_at": "2026-11-01T12:23:22Z",
  "url": "https://research.draconitic.com/paper/9rxzarhrnt9ss",
  "venue": "PeerJ. Computer science",
  "versions": []
}