Abstract: Disclosed is a method and device for image-based malware detection, and artificial intelligence-based endpoint detection and response system using same. The method includes the steps of: reading, as bytes of an unsigned integer of constant bits, an executable file or at least a portion of the code of an executable file located in a file path of a generated file obtained from a file generation event log detected in an EDR system or a processor, a memory, or a storage device associated with an endpoint, and converting same into a byte array; reading two bytes at a time from the byte array; using the two bytes of data as coordinates of an image of a preset size to increase a corresponding coordinate value, and adding an RGB channel to store an image array; and performing deep learning analysis using an image deep learning model on the image array.