{"id":"https://openalex.org/W7225644367","doi":"https://doi.org/10.33003/fjs-2026-1021-6216","title":"Few-Shot Learning for Ransomware Detection: A Narrative Review of Machine Learning, Deep Learning and Siamese Neural Network Approaches","display_name":"Few-Shot Learning for Ransomware Detection: A Narrative Review of Machine Learning, Deep Learning and Siamese Neural Network Approaches","publication_year":2026,"publication_date":"2026-11-09","ids":{"openalex":"https://openalex.org/W7225644367","doi":"https://doi.org/10.33003/fjs-2026-1021-6216"},"language":"en","primary_location":{"id":"doi:10.33003/fjs-2026-1021-6216","doi":"https://doi.org/10.33003/fjs-2026-1021-6216","is_oa":true,"landing_page_url":"https://doi.org/10.33003/fjs-2026-1021-6216","pdf_url":"https://fjs.fudutsinma.org.ng/index.php/fjs/article/download/6216/4244","source":{"id":"https://openalex.org/S4210224159","display_name":"FUDMA Journal of Sciences","issn_l":"2616-1370","issn":["2616-1370","2645-2944"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4404662838","host_organization_name":"Federal University, Dutsin-Ma","host_organization_lineage":["https://openalex.org/P4404662838"],"host_organization_lineage_names":["Federal University, Dutsin-Ma"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"FUDMA Journal of Sciences","raw_type":"journal-article"},"volume":null,"type":"review","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://fjs.fudutsinma.org.ng/index.php/fjs/article/download/6216/4244","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147074275","display_name":"Usman Mohammed Bello","orcid":"https://orcid.org/0009-0009-2461-0587","observed_orcids":["https://orcid.org/0009-0009-2461-0587"]},"institutions":[{"id":"https://openalex.org/I3129379329","display_name":"Sokoto State University","ror":"https://ror.org/00zgr4s34","country_code":"NG","type":"education","lineage":["https://openalex.org/I3129379329"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"Usman Ahmad Bello","raw_affiliation_strings":["Sokoto State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sokoto State University","institution_ids":["https://openalex.org/I3129379329"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5096999383","display_name":"Abubakar Bello Tambuwal","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Abubakar Bello Tambuwal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034005074","display_name":"Anas Tukur Balarabe","orcid":"https://orcid.org/0000-0001-7739-4616","observed_orcids":["https://orcid.org/0000-0001-7739-4616"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Anas Tukur Balarabe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015259814","display_name":"Salisu Modi","orcid":"https://orcid.org/0000-0002-7677-7698","observed_orcids":["https://orcid.org/0000-0002-7677-7698"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Salisu Modi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5143416084","display_name":"Najib Hassan Adamu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Najib Hassan Adamu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"10","issue":"21","first_page":"356","last_page":"363"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware-detection","display_name":"ransomware detection","score":0.9990000128746033},{"id":"https://openalex.org/keywords/few-shot-learning","display_name":"few-shot learning","score":1.0},{"id":"https://openalex.org/keywords/siamese-network","display_name":"Siamese network","score":0.9919999837875366},{"id":"https://openalex.org/keywords/binary-image-representation","display_name":"binary image representation","score":0.8999999761581421},{"id":"https://openalex.org/keywords/entropy-features","display_name":"entropy features","score":0.9679999947547913},{"id":"https://openalex.org/keywords/transfer-learning","display_name":"transfer learning","score":0.9959999918937683},{"id":"https://openalex.org/keywords/malware-classification","display_name":"malware classification","score":0.5139999985694885},{"id":"https://openalex.org/keywords/evaluation-indicators","display_name":"evaluation metrics","score":0.6290000081062317},{"id":"https://openalex.org/keywords/real-time-malware-detection","display_name":"real-time malware detection","score":0.6299999952316284}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.8758999705314636},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7081999778747559},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6690000295639038},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6484000086784363},{"id":"https://openalex.org/C3020000205","wikidata":"https://www.wikidata.org/wiki/Q2412849","display_name":"Narrative review","level":2,"score":0.510699987411499},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.506600022315979},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5044999718666077},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.49000000953674316},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.48240000009536743},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3463999927043915},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27959999442100525}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.33003/fjs-2026-1021-6216","doi":"https://doi.org/10.33003/fjs-2026-1021-6216","is_oa":true,"landing_page_url":"https://doi.org/10.33003/fjs-2026-1021-6216","pdf_url":"https://fjs.fudutsinma.org.ng/index.php/fjs/article/download/6216/4244","source":{"id":"https://openalex.org/S4210224159","display_name":"FUDMA Journal of Sciences","issn_l":"2616-1370","issn":["2616-1370","2645-2944"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4404662838","host_organization_name":"Federal University, Dutsin-Ma","host_organization_lineage":["https://openalex.org/P4404662838"],"host_organization_lineage_names":["Federal University, Dutsin-Ma"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"FUDMA Journal of Sciences","raw_type":"journal-article"},{"id":"pmh:oai:fjs.fudutsinma.edu.ng:article/6216","doi":null,"is_oa":true,"landing_page_url":"https://fjs.fudutsinma.org.ng/index.php/index/article/view/6216","pdf_url":null,"source":{"id":"https://openalex.org/S4210224159","display_name":"FUDMA Journal of Sciences","issn_l":"2616-1370","issn":["2616-1370","2645-2944"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4404662838","host_organization_name":"Federal University, Dutsin-Ma","host_organization_lineage":["https://openalex.org/P4404662838"],"host_organization_lineage_names":["Federal University, Dutsin-Ma"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2645-2944","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.33003/fjs-2026-1021-6216","doi":"https://doi.org/10.33003/fjs-2026-1021-6216","is_oa":true,"landing_page_url":"https://doi.org/10.33003/fjs-2026-1021-6216","pdf_url":"https://fjs.fudutsinma.org.ng/index.php/fjs/article/download/6216/4244","source":{"id":"https://openalex.org/S4210224159","display_name":"FUDMA Journal of Sciences","issn_l":"2616-1370","issn":["2616-1370","2645-2944"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4404662838","host_organization_name":"Federal University, Dutsin-Ma","host_organization_lineage":["https://openalex.org/P4404662838"],"host_organization_lineage_names":["Federal University, Dutsin-Ma"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"FUDMA Journal of Sciences","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225644367.pdf","grobid_xml":"https://content.openalex.org/works/W7225644367.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W2163605009","https://openalex.org/W3000953536","https://openalex.org/W3025864274","https://openalex.org/W3035775076","https://openalex.org/W3047892252","https://openalex.org/W3083177412","https://openalex.org/W3092359151","https://openalex.org/W3095782565","https://openalex.org/W3099702369","https://openalex.org/W3127969436","https://openalex.org/W3172578675","https://openalex.org/W3174684718","https://openalex.org/W3210903652","https://openalex.org/W3215200159","https://openalex.org/W4200030734","https://openalex.org/W4214733430","https://openalex.org/W4220768885","https://openalex.org/W4237807841","https://openalex.org/W4290996451","https://openalex.org/W4395068690","https://openalex.org/W4401515386","https://openalex.org/W4402775759","https://openalex.org/W7171680157"],"related_works":["https://openalex.org/W7171680157","https://openalex.org/W4388562534","https://openalex.org/W4395068690","https://openalex.org/W7133140742","https://openalex.org/W3215200159","https://openalex.org/W4417234761","https://openalex.org/W4253623833","https://openalex.org/W7127138271","https://openalex.org/W7223358943","https://openalex.org/W7116979603"],"abstract_inverted_index":{"The":[0,83],"review":[1,84],"examines":[2],"static":[3],"and":[4,15,31,58,73,104,118],"dynamic":[5],"analysis,":[6],"binary-image":[7],"representation,":[8],"entropy":[9],"features,":[10],"transfer":[11],"learning,":[12],"Siamese":[13,32],"architecture,":[14],"commonly":[16],"used":[17],"evaluation":[18,59,96,102],"metrics.":[19],"Findings":[20],"from":[21],"the":[22,113],"reviewed":[23],"studies":[24],"suggest":[25],"that":[26],"few":[27],"short":[28],"learning":[29],"(FSL)":[30],"neural":[33],"network":[34],"(SNN)":[35],"based":[36],"approaches":[37],"may":[38,111],"offer":[39],"potential":[40],"benefits":[41],"for":[42],"ransomware":[43,99,120],"detection":[44,121],"when":[45],"labeled":[46],"data":[47],"are":[48],"limited.":[49],"However,":[50],"variations":[51],"in":[52],"datasets,":[53,95],"experimental":[54,81],"configurations,":[55],"few-shot":[56],"settings,":[57,93],"procedures":[60],"prevent":[61],"definitive":[62],"conclusions":[63],"about":[64],"their":[65],"comparative":[66],"superiority.":[67],"This":[68],"paper":[69],"synthesizes":[70],"existing":[71],"research":[72,87],"does":[74],"not":[75],"present":[76],"new":[77],"experiments":[78],"or":[79],"independent":[80],"validation.":[82],"identifies":[85],"several":[86],"priorities,":[88],"including":[89],"clearly":[90],"defined":[91],"N-way/K-shot":[92],"diverse":[94],"on":[97],"unseen":[98],"families,":[100],"standardized":[101],"procedures,":[103],"practical":[105],"real-time":[106],"assessment.":[107],"Addressing":[108],"these":[109],"challenges":[110],"support":[112],"development":[114],"of":[115],"more":[116],"reliable":[117],"data-efficient":[119],"methods.":[122]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-10T00:00:00"}