{"id":"https://openalex.org/W4400623754","doi":"https://doi.org/10.1016/j.eswa.2024.124776","title":"MDGraph: A novel malware detection method based on memory dump and graph neural network","display_name":"MDGraph: A novel malware detection method based on memory dump and graph neural network","publication_year":2024,"publication_date":"2024-07-14","ids":{"openalex":"https://openalex.org/W4400623754","doi":"https://doi.org/10.1016/j.eswa.2024.124776"},"language":"en","primary_location":{"id":"doi:10.1016/j.eswa.2024.124776","doi":"https://doi.org/10.1016/j.eswa.2024.124776","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.eswa.2024.124776","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-c","doyens","fnege-3","jufo-2","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101914850","display_name":"Qiyuan Li","orcid":"https://orcid.org/0000-0001-7801-3088","observed_orcids":["https://orcid.org/0000-0001-7801-3088"]},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiyuan Li","raw_affiliation_strings":["Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China"],"raw_orcid":"https://orcid.org/0000-0001-7801-3088","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100335260","display_name":"Bo Zhang","orcid":"https://orcid.org/0000-0002-2289-2877","observed_orcids":["https://orcid.org/0000-0002-2289-2877"]},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Zhang","raw_affiliation_strings":["Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059751912","display_name":"Donghai Tian","orcid":"https://orcid.org/0000-0003-2217-4514","observed_orcids":["https://orcid.org/0000-0003-2217-4514"]},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Donghai Tian","raw_affiliation_strings":["Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China","Key Laboratory of Network Assessment Technology, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China"],"raw_orcid":"https://orcid.org/0000-0003-2217-4514","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China","institution_ids":["https://openalex.org/I125839683"]},{"raw_affiliation_string":"Key Laboratory of Network Assessment Technology, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015456692","display_name":"Xiaoqi Jia","orcid":"https://orcid.org/0000-0002-8376-3235","observed_orcids":["https://orcid.org/0000-0002-8376-3235"]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqi Jia","raw_affiliation_strings":["Key Laboratory of Network Assessment Technology, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of Network Assessment Technology, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102753688","display_name":"Changzhen Hu","orcid":"https://orcid.org/0009-0006-8646-7489","observed_orcids":["https://orcid.org/0009-0006-8646-7489","https://orcid.org/0000-0002-2711-7060"]},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Changzhen Hu","raw_affiliation_strings":["Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Software Security Engineering Technique, Beijing Institute of Technology, Beijing 100081, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5059751912"],"corresponding_institution_ids":["https://openalex.org/I125839683","https://openalex.org/I19820366","https://openalex.org/I4210156404"],"apc_list":{"value":3320,"currency":"USD","value_usd":3320},"apc_paid":null,"fwci":5.2984,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.95991659,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":"255","issue":null,"first_page":"124776","last_page":"124776"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":1.0},{"id":"https://openalex.org/keywords/memory-dumps","display_name":"memory dumps","score":0.7760000228881836},{"id":"https://openalex.org/keywords/graph-neural-networks","display_name":"graph neural networks","score":0.902999997138977},{"id":"https://openalex.org/keywords/dynamic-analysis","display_name":"dynamic analysis","score":0.6110000014305115},{"id":"https://openalex.org/keywords/call-graph","display_name":"call graph","score":0.5889999866485596},{"id":"https://openalex.org/keywords/doc2vec","display_name":"Doc2Vec","score":0.878000020980835},{"id":"https://openalex.org/keywords/packed-malware","display_name":"packed malware","score":0.8130000233650208}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.856785774230957},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7777191996574402},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5141968727111816},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4897468090057373},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4874553680419922},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3856462240219116},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3764854669570923},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27859267592430115},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21191617846488953}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.eswa.2024.124776","doi":"https://doi.org/10.1016/j.eswa.2024.124776","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.eswa.2024.124776","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-c","doyens","fnege-3","jufo-2","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320326707","display_name":"State Grid Corporation of China","ror":"https://ror.org/05twwhs70"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W74439177","https://openalex.org/W1482612322","https://openalex.org/W1544697441","https://openalex.org/W1583837637","https://openalex.org/W1639956611","https://openalex.org/W2025475662","https://openalex.org/W2083183119","https://openalex.org/W2084979543","https://openalex.org/W2131523719","https://openalex.org/W2131744502","https://openalex.org/W2170197386","https://openalex.org/W2557513839","https://openalex.org/W2766343248","https://openalex.org/W2776884785","https://openalex.org/W2795033129","https://openalex.org/W2801888526","https://openalex.org/W2809457377","https://openalex.org/W2894211014","https://openalex.org/W2899250976","https://openalex.org/W2901874618","https://openalex.org/W2905130735","https://openalex.org/W2921770285","https://openalex.org/W2940752008","https://openalex.org/W2949755578","https://openalex.org/W2950774332","https://openalex.org/W2962832406","https://openalex.org/W2969422184","https://openalex.org/W2970528944","https://openalex.org/W3007070494","https://openalex.org/W3020985685","https://openalex.org/W3042770487","https://openalex.org/W3047892252","https://openalex.org/W3048309924","https://openalex.org/W3086651087","https://openalex.org/W3088952683","https://openalex.org/W3113117201","https://openalex.org/W3118382796","https://openalex.org/W3145715289","https://openalex.org/W3170962599","https://openalex.org/W3176174600","https://openalex.org/W3194192366","https://openalex.org/W3200046392","https://openalex.org/W4237211407","https://openalex.org/W4281394465","https://openalex.org/W4300388644","https://openalex.org/W4306406240","https://openalex.org/W4313216189","https://openalex.org/W4315746341","https://openalex.org/W4353055408","https://openalex.org/W4380149468","https://openalex.org/W4385565193","https://openalex.org/W4388726911","https://openalex.org/W4390603899","https://openalex.org/W4394769426","https://openalex.org/W4399516380","https://openalex.org/W7007777617"],"related_works":["https://openalex.org/W2909482470","https://openalex.org/W7117569817","https://openalex.org/W3109694481","https://openalex.org/W4409276199","https://openalex.org/W4283214123","https://openalex.org/W7160447702","https://openalex.org/W2005662348","https://openalex.org/W1965952603","https://openalex.org/W2167611996","https://openalex.org/W2388589213"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-07-15T00:00:00"}