A TTP by TTP Approach: Precise Malware Detection via Malicious TTP Recognition
This paper demonstrates that it is possible to precisely detect malware by providing the neural network model with information about the TTPs used by any given sample, and teaching the neural network to detect not just the malicious activity as a whole, but which specific TTPs are maliciously used.