{"id":"https://openalex.org/W4310282575","doi":"https://doi.org/10.2172/1893244","title":"MalGen: Malware Generation with Specific Behaviors to Improve Machine Learning-based Detectors","display_name":"MalGen: Malware Generation with Specific Behaviors to Improve Machine Learning-based Detectors","publication_year":2022,"publication_date":"2022-10-01","ids":{"openalex":"https://openalex.org/W4310282575","doi":"https://doi.org/10.2172/1893244"},"language":"en","primary_location":{"id":"doi:10.2172/1893244","doi":"https://doi.org/10.2172/1893244","is_oa":false,"landing_page_url":"https://doi.org/10.2172/1893244","pdf_url":null,"source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sandia National Laboratories (SNL)","raw_type":"report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.osti.gov/servlets/purl/1893244","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102021024","display_name":"Michael Smith","orcid":"https://orcid.org/0009-0007-1770-1822","observed_orcids":["https://orcid.org/0009-0007-1770-1822"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Smith","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055240708","display_name":"Armida J. Carbajal","orcid":"https://orcid.org/0009-0009-2268-0434","observed_orcids":["https://orcid.org/0009-0009-2268-0434"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Armida Carbajal","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087136046","display_name":"Eva Domschot","orcid":"https://orcid.org/0000-0002-9425-3484","observed_orcids":["https://orcid.org/0000-0002-9425-3484"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eva Domschot","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074696946","display_name":"Nicholas Johnson","orcid":"https://orcid.org/0000-0002-6106-9373","observed_orcids":["https://orcid.org/0000-0002-6106-9373"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicholas Johnson","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059987569","display_name":"Akul Goyal","orcid":"https://orcid.org/0000-0003-2484-6185","observed_orcids":["https://orcid.org/0000-0003-2484-6185"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akul Goyal","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Christopher Lamb","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Lamb","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049891134","display_name":"Joseph Lubars","orcid":"https://orcid.org/0000-0001-9273-8456","observed_orcids":["https://orcid.org/0000-0001-9273-8456"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph Lubars","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047122075","display_name":"W. Philip Kegelmeyer","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Kegelmeyer","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067044074","display_name":"Raga Krishnakumar","orcid":"https://orcid.org/0000-0002-2479-754X","observed_orcids":["https://orcid.org/0000-0002-2479-754X"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Raga Krishnakumar","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035366463","display_name":"Sophie Quynn","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sophie Quynn","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034060796","display_name":"Ramyaa Ramyaa","orcid":"https://orcid.org/0000-0002-4343-535X","observed_orcids":["https://orcid.org/0000-0002-4343-535X"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ramyaa Ramyaa","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074294924","display_name":"Stephen Verzi","orcid":"https://orcid.org/0000-0003-2152-851X","observed_orcids":["https://orcid.org/0000-0003-2152-851X"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen Verzi","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100424233","display_name":"Xin Zhou","orcid":"https://orcid.org/0000-0002-4558-0622","observed_orcids":["https://orcid.org/0000-0002-4558-0622"]},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I4210104735"]},{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xin Zhou","raw_affiliation_strings":["Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories (SNL), Albuquerque, NM, and Livermore, CA (United States)","institution_ids":["https://openalex.org/I192454743","https://openalex.org/I4210104735"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.8650000095367432},{"id":"https://openalex.org/keywords/malware-generation","display_name":"malware generation","score":0.8289999961853027},{"id":"https://openalex.org/keywords/behavior-based-detection","display_name":"behavior-based detection","score":0.7559999823570251},{"id":"https://openalex.org/keywords/dll-injection","display_name":"DLL injection","score":0.8360000252723694},{"id":"https://openalex.org/keywords/extrapolation","display_name":"extrapolation","score":0.4480000138282776},{"id":"https://openalex.org/keywords/deep-features","display_name":"deep features","score":0.7900000214576721},{"id":"https://openalex.org/keywords/noisy-labels","display_name":"label noise","score":0.3970000147819519}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9750965237617493},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7832196950912476},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6666953563690186},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6444799304008484},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5654069781303406},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5161606073379517},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.4356222450733185},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4347922205924988},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.4162251055240631},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3656834065914154},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3183930516242981},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.283770352602005},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09751391410827637},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08345931768417358},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.2172/1893244","doi":"https://doi.org/10.2172/1893244","is_oa":false,"landing_page_url":"https://doi.org/10.2172/1893244","pdf_url":null,"source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sandia National Laboratories (SNL)","raw_type":"report"},{"id":"pmh:oai:osti.gov:1893244","doi":null,"is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/1893244","pdf_url":"https://www.osti.gov/servlets/purl/1893244","source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:osti.gov:1893244","doi":null,"is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/1893244","pdf_url":"https://www.osti.gov/servlets/purl/1893244","source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320338291","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4310282575.pdf","grobid_xml":"https://content.openalex.org/works/W4310282575.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W1583912456","https://openalex.org/W2120354757","https://openalex.org/W2181083374","https://openalex.org/W2904400021","https://openalex.org/W2989847975","https://openalex.org/W3023308726","https://openalex.org/W3035872583","https://openalex.org/W3100511085","https://openalex.org/W3104876213","https://openalex.org/W3205068608","https://openalex.org/W4288102863"],"related_works":["https://openalex.org/W4205567238","https://openalex.org/W4310428673","https://openalex.org/W6940957094","https://openalex.org/W2597347390","https://openalex.org/W4401797172","https://openalex.org/W3096432474","https://openalex.org/W2626709176","https://openalex.org/W2886849411","https://openalex.org/W4294351669","https://openalex.org/W6922403973"],"abstract_inverted_index":{"In":[0,485],"recent":[1],"years,":[2],"infections":[3],"and":[4,104,137,163,186,202,221,244,256,290,303,310,323,349,413,444,573,619,654],"damage":[5],"caused":[6],"by":[7,34,134,152,157,282,397,447],"malware":[8,56,133,151,158,184,228,243,255,281,286,319,374,388,429,483,493,516,549,628],"have":[9,22,75],"increased":[10],"at":[11],"exponential":[12],"rates.":[13],"At":[14],"the":[15,43,66,125,128,142,170,208,269,276,293,301,306,315,381,432,457,470,480,490,497,505,526,553,571,575,592,649,666],"same":[16,67],"time,":[17],"machine":[18],"learning":[19,35],"(ML)":[20],"techniques":[21,543],"shown":[23,90],"tremendous":[24],"promise":[25],"in":[26,42,72,86,92,116,268,383,394,461,469,479,511,514,606,634,648,665],"many":[27,83],"domains,":[28],"often":[29,106,531],"out":[30,284,372],"performing":[31],"human":[32,664],"efforts":[33],"from":[36,82,253,363,376,417,456,577,595],"large":[37],"amounts":[38],"of":[39,130,144,177,278,340,424,482,492,507,528,570,588,616,651],"data.":[40],"Results":[41,230],"open":[44],"literature":[45],"suggest":[46,336,632],"that":[47,93,172,179,232,337,380,426,499,520,552,611,633],"ML":[48,88,135,297,399,403,471,509,529,638,644],"is":[49,80,109,167,174,206,236,260,342,385,564,613,646],"able":[50,557],"to":[51,98,101,111,140,149,182,191,224,249,262,274,365,431,488,546,558,566,582,597,622,658],"provide":[52],"similar":[53,110],"results":[54,335],"for":[55,127,288],"detection,":[57,360],"achieving":[58],"greater":[59],"than":[60,240,327,346,536,603],"99%":[61,251],"classification":[62,580],"accuracy":[63,247,252,361,594],"[49].":[64],"However,":[65],"detection":[68,143,491,629],"rates":[69],"when":[70,317,370],"applied":[71],"deployed":[73],"settings":[74],"not":[76,207,410],"been":[77,466],"achieved.":[78],"Malware":[79],"distinct":[81,391],"other":[84,119,294],"domains":[85],"which":[87,205,265],"has":[89,390,465,503],"success":[91],"(1)":[94],"it":[95],"purposefully":[96],"tries":[97],"hide,":[99],"leading":[100],"noisy":[102],"labels":[103],"(2)":[105],"its":[107],"behavior":[108,216,359],"benign":[112,332],"software":[113],"only":[114],"differing":[115],"intent,":[117],"among":[118],"complicating":[120],"factors.":[121],"This":[122,166,258,464],"report":[123],"details":[124],"reasons":[126,264],"difficultly":[129],"detecting":[131,153,187,233,279,512],"novel":[132,145,192,280,318,428,515],"methods":[136,348,533],"offers":[138],"solutions":[139],"improve":[141,489,525,659],"malware.":[146,193],"We":[147,271,378,420,475,518,631],"propose":[148,273],"detect":[150],"behaviors":[154,178,196,235,369,513,554],"commonly":[155],"exhibited":[156],"such":[159,551],"as":[160],"DLL":[161],"injection,":[162],"process":[164],"hollowing.":[165],"based":[168],"on":[169,292,504],"assumption":[171],"there":[173],"a":[175,211,285,329,373,422,440,578,583,627,663],"set":[176],"are":[180,266,321,453,556],"common":[181],"most":[183],"samples":[185,550],"them":[188],"will":[189,299],"generalize":[190],"Additionally,":[194],"detected":[195],"point":[197],"analysts":[198],"toward":[199],"appropriate":[200],"handling":[201],"mitigation":[203],"strategies,":[204],"case":[209],"with":[210,662],"binary":[212,579],"benign/malicious":[213],"classification.":[214],"A":[215],"labeling":[217],"method":[218,313],"was":[219,222],"developed":[220],"used":[223],"label":[225],"an":[226,398,402,407,418,486,508,643],"existing":[227],"dataset.":[229],"show":[231,379],"malicious":[234,330],"much":[237,343],"more":[238,326,344,351,537,614],"difficult":[239,345],"simply":[241],"classifying":[242,254],"goodware?achieving":[245],"80%":[246,364],"compared":[248],"reported":[250],"goodware.":[257],"drop":[259],"due":[261,565],"several":[263],"detailed":[267],"report.":[270],"also":[272],"evaluate":[275],"performance":[277,384,506,527,618],"holding":[283,371],"family":[287,375,389],"testing":[289],"training":[291,309,433,458],"families.":[295,517],"Traditional":[296],"evaluation":[298,341],"shuffle":[300],"data":[302,307,434,502,523,590,653],"then":[304],"split":[305],"into":[308],"testing.":[311],"Our":[312,334],"addresses":[314],"use-case":[316],"families":[320,430,452],"encountered":[322],"they":[324],"require":[325],"just":[328],"or":[331],"designation.":[333],"this":[338,478,612],"type":[339],"traditional":[347],"provides":[350],"realistic":[352],"results,":[353],"albeit,":[354],"significantly":[355,454],"worse.":[356],"For":[357],"our":[358],"decreases":[362],"68%":[366,596],"across":[367],"all":[368],"training.":[377],"degradation":[382],"because":[386],"each":[387],"characteristics":[392],"resulting":[393,460],"high":[395],"extrapolations":[396],"model.":[400],"Here,":[401],"model":[404,510,645],"should":[405,640,655],"return":[406],"\"I":[408],"do":[409],"know\"":[411],"response":[412],"request":[414],"further":[415],"analysis":[416,569],"analyst.":[419],"run":[421],"number":[423],"experiments":[425],"compare":[427],"using":[435],"different":[436,455],"feature":[437],"representations":[438],"including":[439],"genomics-inspired":[441],"distance":[442],"measure":[443],"features":[445],"extracted":[446],"deep":[448],"learning.":[449],"Generally,":[450],"held-out":[451],"data,":[459],"unpredictable":[462],"results.":[463],"observed":[467],"generally":[468],"community":[472],"[22,":[473],"9].":[474],"empirically":[476],"demonstrate":[477],"domain":[481],"detection.":[484],"attempt":[487],"behaviors,":[494],"we":[495,609],"examine":[496],"impact":[498],"additional":[500],"synthetic":[501,522,548,589],"find":[519],"while":[521],"does":[524],"models,":[530],"simpler":[532],"perform":[534],"better":[535],"complicated":[538],"ones.":[539],"Two":[540],"generative":[541],"modeling":[542],"were":[544],"examined":[545],"produce":[547],"present":[555],"be":[559,623],"specified":[560],"externally.":[561],"The":[562,586],"difficulty":[563],"finer":[567],"grained":[568],"executable":[572],"modifying":[574],"problem":[576,581],"multi-label":[584],"problem.":[585],"addition":[587],"increases":[591],"overall":[593],"70%.":[598],"While":[599],"far":[600],"less":[601],"accurate":[602],"measures":[604],"presented":[605],"academic":[607],"analyses,":[608],"believe":[610],"representative":[615],"real-world":[617],"allows":[620],"models":[621],"properly":[624],"placed":[625],"within":[626],"system.":[630],"highly":[635],"dynamic":[636],"environments":[637],"pipelines":[639],"determine":[641],"whether":[642],"competent":[647],"area":[650],"new":[652],"involve":[656],"mechanisms":[657],"over":[660],"time":[661],"loop.":[667]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2022-11-30T00:00:00"}