{"id":"https://openalex.org/W3171242319","doi":"https://doi.org/10.31979/etd.c5r3-dsye","title":"Malware Classification Using LSTMs","display_name":"Malware Classification Using LSTMs","publication_year":2020,"publication_date":"2020-12-17","ids":{"openalex":"https://openalex.org/W3171242319","doi":"https://doi.org/10.31979/etd.c5r3-dsye","mag":"3171242319"},"language":"en","primary_location":{"id":"doi:10.31979/etd.c5r3-dsye","doi":"https://doi.org/10.31979/etd.c5r3-dsye","is_oa":true,"landing_page_url":"https://doi.org/10.31979/etd.c5r3-dsye","pdf_url":"https://scholarworks.sjsu.edu/cgi/viewcontent.cgi?article=1964&context=etd_projects","source":{"id":"https://openalex.org/S4377196389","display_name":"San Jos\u00e9 State University ScholarWorks (San Jose State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I51504820","host_organization_name":"San Jose State University","host_organization_lineage":["https://openalex.org/I51504820"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"San Jose State University","raw_type":"dissertation"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://scholarworks.sjsu.edu/cgi/viewcontent.cgi?article=1964&context=etd_projects","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013700240","display_name":"Dennis Dang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I51504820","display_name":"San Jose State University","ror":"https://ror.org/04qyvz380","country_code":"US","type":"education","lineage":["https://openalex.org/I51504820"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Dennis Dang","raw_affiliation_strings":["San Jose State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"San Jose State University","institution_ids":["https://openalex.org/I51504820"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5013700240"],"corresponding_institution_ids":["https://openalex.org/I51504820"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware-classification","display_name":"malware classification","score":0.9940000176429749},{"id":"https://openalex.org/keywords/malware-families","display_name":"malware families","score":0.7179999947547913},{"id":"https://openalex.org/keywords/long-short-term-memory","display_name":"long short-term memory","score":0.7990000247955322},{"id":"https://openalex.org/keywords/bidirectional-lstm","display_name":"bidirectional LSTM","score":0.9850000143051147},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.8529999852180481},{"id":"https://openalex.org/keywords/word-embeddings","display_name":"word embeddings","score":0.734000027179718},{"id":"https://openalex.org/keywords/opcode-analysis","display_name":"opcode analysis","score":0.7870000004768372},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.7239999771118164}],"concepts":[{"id":"https://openalex.org/C52173422","wikidata":"https://www.wikidata.org/wiki/Q766483","display_name":"Opcode","level":2,"score":0.8755578994750977},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8681573867797852},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8369510173797607},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6977927684783936},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6622403264045715},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.6487228274345398},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.6061408519744873},{"id":"https://openalex.org/C2777462759","wikidata":"https://www.wikidata.org/wiki/Q18395344","display_name":"Word embedding","level":3,"score":0.6026593446731567},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5394718050956726},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5134466886520386},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4861471354961395},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.4536421298980713},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.43525370955467224},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3793242871761322},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10843995213508606},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.31979/etd.c5r3-dsye","doi":"https://doi.org/10.31979/etd.c5r3-dsye","is_oa":true,"landing_page_url":"https://doi.org/10.31979/etd.c5r3-dsye","pdf_url":"https://scholarworks.sjsu.edu/cgi/viewcontent.cgi?article=1964&context=etd_projects","source":{"id":"https://openalex.org/S4377196389","display_name":"San Jos\u00e9 State University ScholarWorks (San Jose State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I51504820","host_organization_name":"San Jose State University","host_organization_lineage":["https://openalex.org/I51504820"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"San Jose State University","raw_type":"dissertation"},{"id":"pmh:oai:scholarworks.sjsu.edu:etd_projects-1964","doi":null,"is_oa":false,"landing_page_url":"https://scholarworks.sjsu.edu/etd_projects/963","pdf_url":null,"source":{"id":"https://openalex.org/S4306401059","display_name":"San Jose State University Scholar Works (San Jose State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I51504820","host_organization_name":"San Jose State University","host_organization_lineage":["https://openalex.org/I51504820"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Master's Projects","raw_type":"text"}],"best_oa_location":{"id":"doi:10.31979/etd.c5r3-dsye","doi":"https://doi.org/10.31979/etd.c5r3-dsye","is_oa":true,"landing_page_url":"https://doi.org/10.31979/etd.c5r3-dsye","pdf_url":"https://scholarworks.sjsu.edu/cgi/viewcontent.cgi?article=1964&context=etd_projects","source":{"id":"https://openalex.org/S4377196389","display_name":"San Jos\u00e9 State University ScholarWorks (San Jose State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I51504820","host_organization_name":"San Jose State University","host_organization_lineage":["https://openalex.org/I51504820"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"San Jose State University","raw_type":"dissertation"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3171242319.pdf","grobid_xml":"https://content.openalex.org/works/W3171242319.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W1815076433","https://openalex.org/W2037109870","https://openalex.org/W2171928131","https://openalex.org/W2632775315","https://openalex.org/W2758325595","https://openalex.org/W2782791108","https://openalex.org/W2799784398","https://openalex.org/W2949755578","https://openalex.org/W2951146859","https://openalex.org/W2953919222","https://openalex.org/W2959763773","https://openalex.org/W2974072037","https://openalex.org/W2982342407","https://openalex.org/W3014356165","https://openalex.org/W3041279471","https://openalex.org/W3045604105","https://openalex.org/W3115533518","https://openalex.org/W3117885448"],"related_works":["https://openalex.org/W3133336665","https://openalex.org/W2955992195","https://openalex.org/W4388002327","https://openalex.org/W2794873039","https://openalex.org/W4226093606","https://openalex.org/W2949755578","https://openalex.org/W7214175615","https://openalex.org/W3045604105","https://openalex.org/W2944928086","https://openalex.org/W4407213827"],"abstract_inverted_index":{"Signature":[0],"and":[1,50,82,103],"anomaly":[2],"based":[3],"detection":[4],"have":[5,17,27],"long":[6],"been":[7],"quintessential":[8],"techniques":[9,16,71],"used":[10,72],"in":[11,73,109],"malware":[12,22,56,67],"detection.":[13],"However,":[14],"these":[15],"become":[18],"increasingly":[19],"ineffective":[20],"as":[21,79],"becomes":[23],"more":[24],"complex.":[25],"Researchers":[26],"therefore":[28],"turned":[29],"to":[30,33,54],"deep":[31],"learning":[32],"construct":[34],"better":[35],"performing":[36],"models.":[37],"In":[38],"this":[39],"project,":[40],"we":[41],"create":[42],"four":[43],"different":[44],"long-short":[45],"term":[46],"memory":[47],"(LSTM)":[48],"models":[49],"train":[51],"each":[52],"model":[53,97],"classify":[55],"by":[57],"family":[58],"type.":[59],"Our":[60],"data":[61],"consists":[62],"of":[63,99],"opcodes":[64],"extracted":[65],"from":[66],"executables.":[68],"We":[69,86,93],"employ":[70],"natural":[74],"language":[75],"processing":[76],"(NLP)":[77],"such":[78],"word":[80,100],"embedding":[81],"bidirection":[83],"LSTMs":[84],"(biLSTM).":[85],"also":[87],"use":[88],"convolutional":[89],"neural":[90],"networks":[91],"(CNN).":[92],"found":[94],"that":[95],"our":[96],"consisting":[98],"embedding,":[101],"biLSTMs":[102],"CNN":[104],"layers":[105],"performed":[106],"the":[107],"best":[108],"classifying":[110],"malware.":[111]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2021-06-22T00:00:00"}