Ai-based file maliciousness classification with an explanation of reasoning

Abstract

Techniques are described herein that are capable of performing AI-based maliciousness classification with an explanation of reasoning. An AI model is caused to classify a file in a malicious class or a non-malicious class and to provide an explanation that describes reasoning used by the AI model for the classification by providing an AI prompt together with the file as inputs to the AI model. The AI prompt requests that the AI model choose between the malicious class and the non-malicious class and further requests the explanation. A response to the AI prompt is received from the AI model. The response includes an indication of a selected class in which the AI model classifies the file and further includes the explanation. The explanation is stored and/or is provided to the user via a user interface, and a security operation is performed with regard to the file.