{"id":"https://openalex.org/W7225804702","doi":"https://doi.org/10.3390/electronics15225237","title":"Do Denoising Autoencoders Improve Image-Based Static Malware Detection Under Synthetic Byte-Level Obfuscation and UPX Packing? A Controlled Evaluation","display_name":"Do Denoising Autoencoders Improve Image-Based Static Malware Detection Under Synthetic Byte-Level Obfuscation and UPX Packing? A Controlled Evaluation","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225804702","doi":"https://doi.org/10.3390/electronics15225237"},"language":"en","primary_location":{"id":"doi:10.3390/electronics15225237","doi":"https://doi.org/10.3390/electronics15225237","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics15225237","pdf_url":null,"source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/electronics15225237","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034522762","display_name":"Mesut G\u00fcven","orcid":"https://orcid.org/0000-0002-0957-8541","observed_orcids":["https://orcid.org/0000-0002-0957-8541"]},"institutions":[{"id":"https://openalex.org/I13236232","display_name":"TOBB University of Economics and Technology","ror":"https://ror.org/03ewx7v96","country_code":"TR","type":"education","lineage":["https://openalex.org/I13236232"]}],"countries":["TR"],"is_corresponding":true,"raw_author_name":"Mesut G\u00fcven","raw_affiliation_strings":["Department of Computer Engineering, TOBB University of Economics and Technology, 06560 Ankara, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0000-0002-0957-8541","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, TOBB University of Economics and Technology, 06560 Ankara, T\u00fcrkiye","institution_ids":["https://openalex.org/I13236232"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016102552","display_name":"Fatih Uysal","orcid":"https://orcid.org/0000-0002-1731-2647","observed_orcids":["https://orcid.org/0000-0002-1731-2647"]},"institutions":[{"id":"https://openalex.org/I3132238960","display_name":"Institute of Electrical and Electronics Engineers","ror":"https://ror.org/01n002310","country_code":"US","type":"education","lineage":["https://openalex.org/I3132238960"]},{"id":"https://openalex.org/I54515432","display_name":"Burdur Mehmet Akif Ersoy \u00dcniversitesi","ror":"https://ror.org/04xk0dc21","country_code":"TR","type":"education","lineage":["https://openalex.org/I54515432"]}],"countries":["TR","US"],"is_corresponding":false,"raw_author_name":"Fatih Uysal","raw_affiliation_strings":["Department of Electrical and Electronics Engineering, Burdur Mehmet Akif Ersoy University, 15030 Burdur, T\u00fcrkiye","IEEE Computational Intelligence Society (CIS) T\u00fcrkiye Chapter, IEEE T\u00fcrkiye Section, Ankara, T\u00fcrkiye","IEEE Young Professionals Affinity Group, IEEE T\u00fcrkiye Section, Ankara, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0000-0002-1731-2647","affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronics Engineering, Burdur Mehmet Akif Ersoy University, 15030 Burdur, T\u00fcrkiye","institution_ids":["https://openalex.org/I54515432"]},{"raw_affiliation_string":"IEEE Computational Intelligence Society (CIS) T\u00fcrkiye Chapter, IEEE T\u00fcrkiye Section, Ankara, T\u00fcrkiye","institution_ids":["https://openalex.org/I3132238960"]},{"raw_affiliation_string":"IEEE Young Professionals Affinity Group, IEEE T\u00fcrkiye Section, Ankara, T\u00fcrkiye","institution_ids":["https://openalex.org/I3132238960"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5034522762"],"corresponding_institution_ids":["https://openalex.org/I13236232"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2896},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2896},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":"22","first_page":"5237","last_page":"5237"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.677299976348877},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.574400007724762},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5164999961853027},{"id":"https://openalex.org/C92423082","wikidata":"https://www.wikidata.org/wiki/Q132146","display_name":"Zernike polynomials","level":3,"score":0.4830000102519989},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.48249998688697815},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.47929999232292175},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.45239999890327454},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.4512999951839447},{"id":"https://openalex.org/C2780154230","wikidata":"https://www.wikidata.org/wiki/Q513420","display_name":"Undo","level":2,"score":0.45100000500679016},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.45019999146461487},{"id":"https://openalex.org/C58471807","wikidata":"https://www.wikidata.org/wiki/Q327120","display_name":"Receiver operating characteristic","level":2,"score":0.42250001430511475},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.3700000047683716},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.3571000099182129},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3540000021457672},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.3447999954223633},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30820000171661377},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.299699991941452},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2955999970436096},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C122048520","wikidata":"https://www.wikidata.org/wiki/Q2913954","display_name":"Percentile","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26579999923706055},{"id":"https://openalex.org/C9679016","wikidata":"https://www.wikidata.org/wiki/Q1417473","display_name":"Principle of maximum entropy","level":2,"score":0.2533999979496002},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/electronics15225237","doi":"https://doi.org/10.3390/electronics15225237","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics15225237","pdf_url":null,"source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/electronics15225237","doi":"https://doi.org/10.3390/electronics15225237","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics15225237","pdf_url":null,"source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Image-based":[0],"static":[1],"malware":[2],"detectors":[3],"can":[4],"be":[5],"disturbed":[6],"by":[7,149],"obfuscation,":[8],"and":[9,41,74,88,117,152,175,183,188,195,202],"a":[10,27,55,61,71,105,143,166,206,210,218],"denoising":[11],"autoencoder":[12],"(DAE)":[13],"in":[14,94],"front":[15],"of":[16,92,129,181,192,204,221],"the":[17,34,42,95,98,107,130,136,160,184],"classifier":[18,145],"is":[19,208,217],"often":[20],"proposed":[21],"to":[22,48,112,120,171],"undo":[23],"it.":[24],"We":[25,59],"built":[26],"controlled":[28],"evaluation":[29],"on":[30,67,155,214],"17,000":[31],"files":[32,116,124],"from":[33,110,118],"TRAPMINE":[35],"collection.":[36],"Six":[37],"synthetic":[38],"byte-level":[39],"transformations":[40],"real":[43],"packer":[44],"UPX":[45,131],"were":[46],"applied":[47],"both":[49],"classes,":[50],"so":[51],"every":[52],"file":[53],"had":[54],"known":[56,167],"clean":[57],"version.":[58],"compared":[60],"DAE":[62,141,207],"with":[63,142],"no":[64],"defence,":[65,106],"training":[66,213],"obfuscated":[68,215],"examples":[69,216],"(augmentation),":[70],"blur":[72],"filter,":[73],"an":[75,89,179],"exact":[76],"inverse,":[77],"using":[78],"two":[79],"CNN":[80],"classifiers,":[81],"three":[82],"random":[83],"splits,":[84],"paired":[85],"bootstrap":[86],"intervals,":[87],"equivalence":[90],"margin":[91],"\u00b10.02":[93],"area":[96],"under":[97],"receiver":[99],"operating":[100],"characteristic":[101],"curve":[102],"(AUC).":[103],"Without":[104],"AUC":[108,154,180],"fell":[109],"0.859":[111],"0.628":[113],"for":[114,122,164],"zlib-packed":[115],"0.858":[119],"0.686":[121],"UPX-packed":[123],"(CNN-1).":[125],"Augmentation":[126],"recovered":[127],"most":[128],"loss":[132,138],"(0.842)":[133],"but":[134],"not":[135,209],"zlib":[137],"(0.716).":[139],"A":[140],"matched":[144],"was":[146,163],"above":[147],"augmentation":[148],"only":[150],"0.006":[151],"0.008":[153],"average":[156],"over":[157],"five":[158],"transformations;":[159],"clearest":[161],"gain":[162],"encryption,":[165],"invertible":[168],"change":[169],"(up":[170],"+0.029).":[172],"File":[173],"size":[174,194],"entropy":[176],"alone":[177],"reached":[178],"0.813,":[182],"CNNs":[185],"kept":[186],"0.795":[187],"0.824":[189],"inside":[190],"groups":[191],"equal":[193],"entropy.":[196],"For":[197],"this":[198],"image":[199],"construction,":[200],"dataset,":[201],"set":[203],"transformations,":[205],"general":[211],"remedy;":[212],"simpler":[219],"baseline":[220],"similar":[222],"effect.":[223]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}