{"id":"https://openalex.org/W7203689360","doi":"https://doi.org/10.5281/zenodo.22001492","title":"Replication Package: Adaptive Behavioral Fingerprinting for Cloud\u2013IoT Malware Behavior Detection and Containment","display_name":"Replication Package: Adaptive Behavioral Fingerprinting for Cloud\u2013IoT Malware Behavior Detection and Containment","publication_year":2026,"publication_date":"2026-08-18","ids":{"openalex":"https://openalex.org/W7203689360","doi":"https://doi.org/10.5281/zenodo.22001492"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.22001492","doi":"https://doi.org/10.5281/zenodo.22001492","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22001492","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Software"},"volume":null,"type":"software","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.22001492","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019342115","display_name":"Mohammad M. Rasheed","orcid":"https://orcid.org/0000-0002-2597-6363","observed_orcids":["https://orcid.org/0000-0002-2597-6363"]},"institutions":[{"id":"https://openalex.org/I4210119257","display_name":"University of Information Technology and Communications","ror":"https://ror.org/028h0pd91","country_code":"IQ","type":"education","lineage":["https://openalex.org/I4210119257"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Rasheed, Mohammad M.","raw_affiliation_strings":["University of Information Technology and Communications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Information Technology and Communications","institution_ids":["https://openalex.org/I4210119257"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004525212","display_name":"Mustafa Muwafak Alobaedy","orcid":"https://orcid.org/0000-0002-6562-2922","observed_orcids":["https://orcid.org/0000-0002-6562-2922"]},"institutions":[{"id":"https://openalex.org/I173029219","display_name":"Multimedia University","ror":"https://ror.org/04zrbnc33","country_code":"MY","type":"education","lineage":["https://openalex.org/I173029219"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Alobaedy, Mustafa Muwafak","raw_affiliation_strings":["Multimedia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Multimedia University","institution_ids":["https://openalex.org/I173029219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9185000061988831,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9185000061988831,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.06960000097751617,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iot-malware-detection","display_name":"IoT malware detection","score":0.7350000143051147},{"id":"https://openalex.org/keywords/cloud-security","display_name":"cloud security","score":0.6499999761581421},{"id":"https://openalex.org/keywords/malware-containment","display_name":"malware containment","score":0.8199999928474426},{"id":"https://openalex.org/keywords/network-telemetry","display_name":"network telemetry","score":0.75},{"id":"https://openalex.org/keywords/cse-cic-ids2018","display_name":"CSE-CIC-IDS2018","score":0.8899999856948853},{"id":"https://openalex.org/keywords/ton-iot-dataset","display_name":"ToN-IoT","score":0.7799999713897705},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"role-based access control","score":0.7129999995231628},{"id":"https://openalex.org/keywords/cross-dataset-transfer","display_name":"cross-dataset transfer","score":0.9750000238418579},{"id":"https://openalex.org/keywords/temporal-analysis","display_name":"temporal analysis","score":0.4320000112056732}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7754999995231628},{"id":"https://openalex.org/C12590798","wikidata":"https://www.wikidata.org/wiki/Q3933199","display_name":"Replication (statistics)","level":2,"score":0.7430999875068665},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6150000095367432},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.5159000158309937},{"id":"https://openalex.org/C2777019822","wikidata":"https://www.wikidata.org/wiki/Q390066","display_name":"Containment (computer programming)","level":2,"score":0.4462999999523163},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4415000081062317},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.426800012588501},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.3806000053882599},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.37380000948905945},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3725000023841858},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.3589000105857849},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.3515999913215637},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.3490000069141388},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.32739999890327454},{"id":"https://openalex.org/C2780416260","wikidata":"https://www.wikidata.org/wiki/Q2063","display_name":"JSON","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.3018999993801117},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.27720001339912415},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26669999957084656},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.2653999924659729},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C29140674","wikidata":"https://www.wikidata.org/wiki/Q206637","display_name":"Computer cluster","level":2,"score":0.259799987077713}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.22001492","doi":"https://doi.org/10.5281/zenodo.22001492","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22001492","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Software"},{"id":"doi:10.5281/zenodo.22001493","doi":"https://doi.org/10.5281/zenodo.22001493","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22001493","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Software"}],"best_oa_location":{"id":"doi:10.5281/zenodo.22001492","doi":"https://doi.org/10.5281/zenodo.22001492","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22001492","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Software"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7161766901","https://openalex.org/W7213543489","https://openalex.org/W7165558050","https://openalex.org/W7203607603","https://openalex.org/W7215080992","https://openalex.org/W7171328937","https://openalex.org/W7214370293","https://openalex.org/W4384030653","https://openalex.org/W7144499893","https://openalex.org/W7150998871"],"abstract_inverted_index":{"Replication":[0],"package":[1,26],"for":[2,8,95],"the":[3,17,92,96,104,114,119,126,133,143],"paper":[4,144],"\"Adaptive":[5],"Behavioral":[6],"Fingerprinting":[7],"Cloud\u2013IoT":[9],"Malware":[10],"Behavior":[11],"Detection":[12],"and":[13,22,41,54,78,87,101,132],"Containment\",":[14],"submitted":[15],"to":[16],"Journal":[18],"of":[19],"Computer":[20],"Virology":[21],"Hacking":[23],"Techniques.":[24],"The":[25,31,57],"covers":[27],"two":[28],"experimental":[29],"environments.":[30],"first":[32],"is":[33,59,145],"network":[34,97],"telemetry:":[35,61],"eight":[36],"sequential":[37],"experiments":[38],"on":[39,65],"TON_IoT":[40],"CSE-CIC-IDS2018,":[42],"including":[43],"significance":[44],"testing,":[45],"calibrated":[46],"temporal":[47],"evaluation,":[48],"window-level":[49],"attack":[50],"holdout,":[51],"drift-triggered":[52],"adaptation":[53],"cross-dataset":[55],"transfer.":[56],"second":[58],"orchestration":[60],"a":[62,66],"replication":[63],"study":[64],"real":[67],"three-node":[68],"Kubernetes":[69,73],"cluster":[70,99],"(kind":[71],"v0.27.0,":[72],"v1.32.2)":[74],"with":[75],"enforced":[76],"RBAC":[77],"API-server":[79],"audit":[80,85,102],"logging,":[81],"producing":[82],"44,592":[83],"genuine":[84],"events":[86],"2,228":[88],"entity-time":[89],"windows.":[90],"Contents:":[91],"Colab":[93],"notebook":[94],"experiments;":[98],"configuration":[100],"policy;":[103],"activity-generation":[105],"script;":[106],"seven":[107],"analysis":[108,120],"scripts":[109],"numbered":[110],"in":[111,142],"execution":[112],"order;":[113],"derived":[115],"feature":[116],"table":[117],"so":[118],"can":[121],"be":[122],"reproduced":[123],"without":[124],"rebuilding":[125],"cluster;":[127],"all":[128],"consolidated":[129],"JSON":[130],"results;":[131],"publication":[134],"figures":[135],"at":[136],"300":[137],"DPI.":[138],"Every":[139],"number":[140],"reported":[141],"reproducible":[146],"from":[147],"this":[148],"package.":[149]},"counts_by_year":[],"updated_date":"2026-10-09T09:14:12.587421","created_date":"2026-08-19T00:00:00"}