{"id":"https://openalex.org/W2990612420","doi":"https://doi.org/10.1109/iscit.2019.8905120","title":"C500-CFG: A Novel Algorithm to Extract Control Flow-based Features for IoT Malware Detection","display_name":"C500-CFG: A Novel Algorithm to Extract Control Flow-based Features for IoT Malware Detection","publication_year":2019,"publication_date":"2019-09-01","ids":{"openalex":"https://openalex.org/W2990612420","doi":"https://doi.org/10.1109/iscit.2019.8905120","mag":"2990612420"},"language":"en","primary_location":{"id":"doi:10.1109/iscit.2019.8905120","doi":"https://doi.org/10.1109/iscit.2019.8905120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscit.2019.8905120","pdf_url":null,"source":{"id":"https://openalex.org/S4306420105","display_name":"International Symposium on Communications and Information Technologies","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 19th International Symposium on Communications and Information Technologies (ISCIT)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055449937","display_name":"Tran Nghi Phu","orcid":"https://orcid.org/0000-0003-0565-7274","observed_orcids":["https://orcid.org/0000-0003-0565-7274"]},"institutions":[{"id":"https://openalex.org/I4405277059","display_name":"VNU University of Engineering and Technology","ror":"https://ror.org/019sx5d52","country_code":"VN","type":"education","lineage":["https://openalex.org/I177233841","https://openalex.org/I4405277059"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Tran Nghi Phu","raw_affiliation_strings":["VNU University of Engineering and Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VNU University of Engineering and Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4405277059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007079556","display_name":"Le Huy Hoang","orcid":"https://orcid.org/0009-0005-9240-2836","observed_orcids":["https://orcid.org/0009-0005-9240-2836"]},"institutions":[{"id":"https://openalex.org/I4405277163","display_name":"H\u1ecdc vi\u1ec7n An ninh nh\u00e2n d\u00e2n","ror":"https://ror.org/01ptcf347","country_code":"VN","type":"education","lineage":["https://openalex.org/I4405277163"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Le Hoang","raw_affiliation_strings":["People's Security Academy (PSA), Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"People's Security Academy (PSA), Hanoi, Vietnam","institution_ids":["https://openalex.org/I4405277163"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003172151","display_name":"Nguyen Ngoc Toan","orcid":"https://orcid.org/0009-0003-2317-9867","observed_orcids":["https://orcid.org/0009-0003-2317-9867"]},"institutions":[{"id":"https://openalex.org/I4405277163","display_name":"H\u1ecdc vi\u1ec7n An ninh nh\u00e2n d\u00e2n","ror":"https://ror.org/01ptcf347","country_code":"VN","type":"education","lineage":["https://openalex.org/I4405277163"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Nguyen Ngoc Toan","raw_affiliation_strings":["People's Security Academy (PSA), Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"People's Security Academy (PSA), Hanoi, Vietnam","institution_ids":["https://openalex.org/I4405277163"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102317348","display_name":"Dai Tho Nguyen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405277059","display_name":"VNU University of Engineering and Technology","ror":"https://ror.org/019sx5d52","country_code":"VN","type":"education","lineage":["https://openalex.org/I177233841","https://openalex.org/I4405277059"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Nguyen Dai Tho","raw_affiliation_strings":["VNU University of Engineering and Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VNU University of Engineering and Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4405277059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103934807","display_name":"Nguy\u1ec5n Ng\u1ecdc B\u00ecnh","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405277059","display_name":"VNU University of Engineering and Technology","ror":"https://ror.org/019sx5d52","country_code":"VN","type":"education","lineage":["https://openalex.org/I177233841","https://openalex.org/I4405277059"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Nguyen Ngoc Binh","raw_affiliation_strings":["VNU University of Engineering and Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VNU University of Engineering and Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4405277059"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.588,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.81695185,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"568","last_page":"573"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iot-malware-detection","display_name":"IoT malware detection","score":0.9440000057220459},{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.5979999899864197},{"id":"https://openalex.org/keywords/dynamic-programming","display_name":"dynamic programming","score":0.8100000023841858},{"id":"https://openalex.org/keywords/np-hard-problems","display_name":"NP-hard problems","score":0.6259999871253967},{"id":"https://openalex.org/keywords/basic-blocks","display_name":"basic blocks","score":0.6209999918937683},{"id":"https://openalex.org/keywords/malware-classification","display_name":"malware classification","score":0.3089999854564667}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7749759554862976},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7694604396820068},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7519292831420898},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5555039644241333},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.545749843120575},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.5048099756240845},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4581318497657776},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35566169023513794},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.23453810811042786},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13636264204978943},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iscit.2019.8905120","doi":"https://doi.org/10.1109/iscit.2019.8905120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscit.2019.8905120","pdf_url":null,"source":{"id":"https://openalex.org/S4306420105","display_name":"International Symposium on Communications and Information Technologies","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 19th International Symposium on Communications and Information Technologies (ISCIT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W36091977","https://openalex.org/W1482612322","https://openalex.org/W1694077306","https://openalex.org/W1827822366","https://openalex.org/W2034938003","https://openalex.org/W2079215333","https://openalex.org/W2091669653","https://openalex.org/W2100151287","https://openalex.org/W2142145056","https://openalex.org/W2360903897","https://openalex.org/W2514974017","https://openalex.org/W2902209387","https://openalex.org/W7073826365"],"related_works":["https://openalex.org/W3097208766","https://openalex.org/W2961099251","https://openalex.org/W7214541069","https://openalex.org/W2006985892","https://openalex.org/W4200117421","https://openalex.org/W3027319358","https://openalex.org/W4225590486","https://openalex.org/W2074840958","https://openalex.org/W3109130616","https://openalex.org/W4285813007"],"abstract_inverted_index":{"Static":[0],"characteristic":[1],"extraction":[2],"method":[3,26],"Control":[4,51],"flow-based":[5,52],"features":[6,53],"proposed":[7],"by":[8],"Ding":[9],"has":[10],"the":[11,39,47,56,72],"ability":[12],"to":[13],"detect":[14],"malicious":[15],"code":[16],"with":[17,38,113],"higher":[18],"accuracy":[19],"than":[20,92],"traditional":[21],"Text-based":[22],"methods.":[23],"However,":[24],"this":[25],"resolved":[27],"NP-hard":[28,63],"problem":[29,64],"in":[30,50,65,77,89],"a":[31],"graph,":[32],"therefore":[33],"it":[34],"is":[35,71,83],"not":[36],"feasible":[37],"large-size":[40],"and":[41,86,105],"high-complexity":[42],"programs.":[43],"So,":[44],"we":[45],"propose":[46],"C500-CFG":[48],"algorithm":[49,82],"based":[54],"on":[55,120],"idea":[57],"of":[58,74],"dynamic":[59],"programming,":[60],"solving":[61],"Ding's":[62,93],"O(N2)":[66],"time":[67],"complexity,":[68],"where":[69],"N":[70],"number":[73],"basic":[75],"blocks":[76],"decom-piled":[78],"executable":[79],"codes.":[80],"Our":[81],"more":[84,87,107],"efficient":[85],"outstanding":[88,118],"detecting":[90],"malware":[91],"algorithm:":[94],"fast":[95],"processing":[96,99],"time,":[97],"allowing":[98],"large":[100],"files,":[101],"using":[102],"less":[103],"memory":[104],"extracting":[106],"feature":[108],"information.":[109],"Applying":[110],"our":[111],"algorithms":[112],"IoT":[114],"data":[115],"sets":[116],"gives":[117],"results":[119],"2":[121],"measures:":[122],"Accuracy":[123],"=":[124,127],"99.34%,":[125],"F1-Score":[126],"99.32%.":[128]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2019,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2019-12-05T00:00:00"}