{"id":"https://openalex.org/W2786078377","doi":"https://doi.org/10.5220/0006884704120419","title":"Malware Detection in PDF Files using Machine Learning","display_name":"Malware Detection in PDF Files using Machine Learning","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2786078377","doi":"https://doi.org/10.5220/0006884704120419","mag":"2786078377"},"language":"en","primary_location":{"id":"doi:10.5220/0006884704120419","doi":"https://doi.org/10.5220/0006884704120419","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0006884704120419","pdf_url":null,"source":{"id":"https://openalex.org/S4363609017","display_name":"International Joint Conference on e-Business and Telecommunications (ICETE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Joint Conference on e-Business and Telecommunications","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.5220/0006884704120419","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075323532","display_name":"Bonan Cuan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210155607","display_name":"Laboratoire d'Informatique en Images et Syst\u00e8mes d'Information","ror":"https://ror.org/04dv4he91","country_code":"FR","type":"facility","lineage":["https://openalex.org/I100532134","https://openalex.org/I112936343","https://openalex.org/I1294671590","https://openalex.org/I188626449","https://openalex.org/I203339264","https://openalex.org/I4210155607","https://openalex.org/I48430043"]},{"id":"https://openalex.org/I48430043","display_name":"Institut National des Sciences Appliqu\u00e9es de Lyon","ror":"https://ror.org/050jn9y42","country_code":"FR","type":"education","lineage":["https://openalex.org/I203339264","https://openalex.org/I48430043"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Bonan Cuan","raw_affiliation_strings":["INSA Lyon, CNRS, LIRIS, Lyon and France, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INSA Lyon, CNRS, LIRIS, Lyon and France, --- Select a Country ---","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210155607","https://openalex.org/I48430043"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033120900","display_name":"Ali\u00e9nor Damien","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I190497903","display_name":"Laboratoire d'Analyse et d'Architecture des Syst\u00e8mes","ror":"https://ror.org/03vcm6439","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I190497903","https://openalex.org/I193033237","https://openalex.org/I196454796","https://openalex.org/I205747304","https://openalex.org/I4210095849","https://openalex.org/I4210152422","https://openalex.org/I4210159245","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Ali\u00e9nor Damien","raw_affiliation_strings":["Thales Group, Toulouse, France, CNRS, LAAS, Toulouse and France, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thales Group, Toulouse, France, CNRS, LAAS, Toulouse and France, --- Select a Country ---","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I190497903"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071991273","display_name":"Claire Delaplace","orcid":"https://orcid.org/0000-0002-5314-1806","observed_orcids":["https://orcid.org/0000-0002-5314-1806"]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2279609970","display_name":"Universit\u00e9 de Lille","ror":"https://ror.org/02kzqn938","country_code":"FR","type":"education","lineage":["https://openalex.org/I2279609970"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I4387153239","display_name":"Centre de Recherche en Informatique, Signal et Automatique de Lille","ror":"https://ror.org/05vrs3189","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I2279609970","https://openalex.org/I4387153239","https://openalex.org/I7454413"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Claire Delaplace","raw_affiliation_strings":["Univ Rennes 1, CNRS, IRISA, 35000 Rennes, France, Univ. Lille, CRIStAL, 59655 Villeneuve d\u2019Ascq and France, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ Rennes 1, CNRS, IRISA, 35000 Rennes, France, Univ. Lille, CRIStAL, 59655 Villeneuve d\u2019Ascq and France, --- Select a Country ---","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2279609970","https://openalex.org/I2802519937","https://openalex.org/I4387153239","https://openalex.org/I56067802"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032373180","display_name":"Mathieu Valois","orcid":"https://orcid.org/0000-0002-3492-7213","observed_orcids":["https://orcid.org/0000-0002-3492-7213"]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I194210350","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs de Caen","ror":"https://ror.org/01fpqqe90","country_code":"FR","type":"education","lineage":["https://openalex.org/I194210350","https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210105918","display_name":"Normandie Universit\u00e9","ror":"https://ror.org/01k40cz91","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210139483","display_name":"GREYC","ror":"https://ror.org/043749971","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I4210159245","https://openalex.org/I98702875"]},{"id":"https://openalex.org/I98702875","display_name":"Universit\u00e9 de Caen Normandie","ror":"https://ror.org/051kpcy16","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Mathieu Valois","raw_affiliation_strings":["Normandie Univ., UNICAEN, ENSICAEN, CNRS, GREYC, 14000 Caen and France, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Normandie Univ., UNICAEN, ENSICAEN, CNRS, GREYC, 14000 Caen and France, --- Select a Country ---","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I98702875"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":12,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5399,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.83047724,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"412","last_page":"419"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9648000001907349,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9648000001907349,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.029600000008940697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.9430000185966492},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"support vector machine","score":0.8320000171661377},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.765999972820282},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"adversarial learning","score":0.6869999766349792},{"id":"https://openalex.org/keywords/feature-selection","display_name":"feature selection","score":0.7390000224113464},{"id":"https://openalex.org/keywords/detection-threshold","display_name":"detection threshold","score":0.5070000290870667},{"id":"https://openalex.org/keywords/malware-countermeasures","display_name":"malware countermeasures","score":0.5830000042915344}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8880558013916016},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.8189600110054016},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7903506755828857},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6711509227752686},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.650053858757019},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.585780680179596},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.4889792203903198},{"id":"https://openalex.org/C199190896","wikidata":"https://www.wikidata.org/wiki/Q3509276","display_name":"Learning classifier system","level":3,"score":0.4222061336040497},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.371915340423584},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.37151065468788147},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.165228933095932}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.5220/0006884704120419","doi":"https://doi.org/10.5220/0006884704120419","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0006884704120419","pdf_url":null,"source":{"id":"https://openalex.org/S4363609017","display_name":"International Joint Conference on e-Business and Telecommunications (ICETE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Joint Conference on e-Business and Telecommunications","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.5220/0006884704120419","doi":"https://doi.org/10.5220/0006884704120419","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0006884704120419","pdf_url":null,"source":{"id":"https://openalex.org/S4363609017","display_name":"International Joint Conference on e-Business and Telecommunications (ICETE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Joint Conference on e-Business and Telecommunications","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4316012720","https://openalex.org/W7213467164","https://openalex.org/W2312936843","https://openalex.org/W6927360182","https://openalex.org/W3110185088","https://openalex.org/W4394797753","https://openalex.org/W2082190528","https://openalex.org/W4410976912","https://openalex.org/W4319430340","https://openalex.org/W2948095775"],"abstract_inverted_index":{"In":[0,90],"this":[1,18,39,82,94],"report":[2],"we":[3,6,20,48,96,128],"present":[4],"how":[5],"used":[7],"machine":[8],"learning":[9,126],"techniques":[10],"to":[11,33,43,50,80,92,99,116,119,131],"detect":[12,34],"malicious":[13,46,142],"behaviours":[14],"in":[15],"PDF":[16,154],"files.At":[17],"aim,":[19],"first":[21,58],"set":[22],"up":[23,118],"a":[24,60,72,77,112],"SVM":[25,140],"(Support":[26],"Machine":[27],"Vector)":[28],"classifier":[29,40],"that":[30,64,147],"was":[31,41,65,86],"able":[32,130],"99.7%":[35],"of":[36,71,111,121],"malware.":[37],"However,":[38],"easy":[42],"lure":[44],"with":[45,141],"PDF,":[47],"forged":[49,143,153],"make":[51],"them":[52],"look":[53],"like":[54],"clean":[55],"ones.":[56],"We":[57,74,145],"proposed":[59],"very":[61],"naive":[62],"attack,":[63],"easily":[66],"stopped":[67],"by":[68,136],"the":[69,100,109,139,159],"establishment":[70],"threshold.":[73],"also":[75],"implemented":[76],"gradientdescent":[78],"attack":[79,85],"evade":[81],"SVM.":[83],"This":[84],"almost":[87],"100%":[88],"successful.":[89],"order":[91],"fix":[93],"problem,":[95],"provided":[97],"counter-measures":[98],"latter":[101],"attack.":[102,160],"A":[103],"more":[104],"elaborated":[105],"features":[106],"selection,":[107],"and":[108],"use":[110],"threshold,":[113],"allowed":[114],"us":[115],"stop":[117],"99.99%":[120],"these":[122],"attacks.Finally,":[123],"using":[124],"adversarial":[125],"techniques,":[127],"were":[129,155],"prevent":[132],"gradient":[133],"descent":[134],"attacks":[135],"iteratively":[137],"feeding":[138],"PDF.":[144],"found":[146],"after":[148],"3":[149],"iterations,":[150],"every":[151],"gradient-descent":[152],"detected,":[156],"completely":[157],"preventing":[158]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2018-02-23T00:00:00"}