{"id":"https://openalex.org/W7125530808","doi":"https://doi.org/10.1007/s00521-025-11810-5","title":"RanVisStat: a statistical feature engineering approach for ransomware binary and multiclass classification using machine learning","display_name":"RanVisStat: a statistical feature engineering approach for ransomware binary and multiclass classification using machine learning","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7125530808","doi":"https://doi.org/10.1007/s00521-025-11810-5"},"language":"en","primary_location":{"id":"doi:10.1007/s00521-025-11810-5","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s00521-025-11810-5","pdf_url":null,"source":{"id":"https://openalex.org/S147897268","display_name":"Neural Computing and Applications","issn_l":"0941-0643","issn":["0941-0643","1433-3058"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Neural Computing and Applications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009660202","display_name":"Syed Shakir Hameed Shah","orcid":null},"institutions":[{"id":"https://openalex.org/I79156528","display_name":"Universiti Tenaga Nasional","ror":"https://ror.org/03kxdn807","country_code":"MY","type":"education","lineage":["https://openalex.org/I79156528","https://openalex.org/I874769580"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Syed Shakir Hameed Shah","raw_affiliation_strings":["Institute of Informatics and Computing in Energy, College of Computing and Informatics, Universiti Tenaga Nasional, Jalan IKRAM-UNITEN, 43000, Kajang, Malaysia"],"affiliations":[{"raw_affiliation_string":"Institute of Informatics and Computing in Energy, College of Computing and Informatics, Universiti Tenaga Nasional, Jalan IKRAM-UNITEN, 43000, Kajang, Malaysia","institution_ids":["https://openalex.org/I79156528"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121008196","display_name":"Norziana Jamil","orcid":null},"institutions":[{"id":"https://openalex.org/I201726411","display_name":"United Arab Emirates University","ror":"https://ror.org/01km6p862","country_code":"AE","type":"education","lineage":["https://openalex.org/I201726411"]},{"id":"https://openalex.org/I161913731","display_name":"Al Ain University","ror":"https://ror.org/023abrt21","country_code":"AE","type":"education","lineage":["https://openalex.org/I161913731"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Norziana Jamil","raw_affiliation_strings":["College of Information Technology, United Arab Emirates University, P.O.Box 15551, Al Ain, Abu Dhabi, United Arab Emirates"],"affiliations":[{"raw_affiliation_string":"College of Information Technology, United Arab Emirates University, P.O.Box 15551, Al Ain, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I201726411","https://openalex.org/I161913731"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122867213","display_name":"Lariyah Mohd Sidek","orcid":null},"institutions":[{"id":"https://openalex.org/I79156528","display_name":"Universiti Tenaga Nasional","ror":"https://ror.org/03kxdn807","country_code":"MY","type":"education","lineage":["https://openalex.org/I79156528","https://openalex.org/I874769580"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Lariyah Mohd Sidek","raw_affiliation_strings":["Institute of Energy Infrastructure, Universiti Tenaga Nasional, Jalan IKRAM-UNITEN, 43000, Kajang, Malaysia"],"affiliations":[{"raw_affiliation_string":"Institute of Energy Infrastructure, Universiti Tenaga Nasional, Jalan IKRAM-UNITEN, 43000, Kajang, Malaysia","institution_ids":["https://openalex.org/I79156528"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039995971","display_name":"Asif Khan","orcid":"https://orcid.org/0000-0001-5009-3290"},"institutions":[{"id":"https://openalex.org/I182000528","display_name":"Ajman University","ror":"https://ror.org/01j1rma10","country_code":"AE","type":"education","lineage":["https://openalex.org/I182000528"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Atta ur Rehman Khan","raw_affiliation_strings":["College of Engineering and IT, Ajman University, P.O.Box 346, Ajman, United Arab Emirates"],"affiliations":[{"raw_affiliation_string":"College of Engineering and IT, Ajman University, P.O.Box 346, Ajman, United Arab Emirates","institution_ids":["https://openalex.org/I182000528"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113107400","display_name":"Ezedin Baraka","orcid":null},"institutions":[{"id":"https://openalex.org/I201726411","display_name":"United Arab Emirates University","ror":"https://ror.org/01km6p862","country_code":"AE","type":"education","lineage":["https://openalex.org/I201726411"]},{"id":"https://openalex.org/I161913731","display_name":"Al Ain University","ror":"https://ror.org/023abrt21","country_code":"AE","type":"education","lineage":["https://openalex.org/I161913731"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ezedin Baraka","raw_affiliation_strings":["College of Information Technology, United Arab Emirates University, P.O.Box 15551, Al Ain, Abu Dhabi, United Arab Emirates"],"affiliations":[{"raw_affiliation_string":"College of Information Technology, United Arab Emirates University, P.O.Box 15551, Al Ain, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I201726411","https://openalex.org/I161913731"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5121008196"],"corresponding_institution_ids":["https://openalex.org/I161913731","https://openalex.org/I201726411"],"apc_list":{"value":2390,"currency":"EUR","value_usd":2990},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24483898,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"38","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0034000000450760126,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0010000000474974513,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9319000244140625},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5497000217437744},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.5134000182151794},{"id":"https://openalex.org/keywords/randomness","display_name":"Randomness","score":0.5123999714851379},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.48500001430511475},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.47130000591278076},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.45329999923706055},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.44760000705718994},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.4341000020503998},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.390500009059906}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9319000244140625},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8296999931335449},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6754999756813049},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.616599977016449},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5497000217437744},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.5134000182151794},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.5123999714851379},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.48500001430511475},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.47130000591278076},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.45329999923706055},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.44760000705718994},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.4341000020503998},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4072999954223633},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.390500009059906},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.3790000081062317},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.37700000405311584},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.37290000915527344},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.3702999949455261},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C68597687","wikidata":"https://www.wikidata.org/wiki/Q362601","display_name":"Computational Science and Engineering","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C139532973","wikidata":"https://www.wikidata.org/wiki/Q2679259","display_name":"Linear classifier","level":3,"score":0.29899999499320984},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2919999957084656},{"id":"https://openalex.org/C199190896","wikidata":"https://www.wikidata.org/wiki/Q3509276","display_name":"Learning classifier system","level":3,"score":0.2822999954223633},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26649999618530273},{"id":"https://openalex.org/C9679016","wikidata":"https://www.wikidata.org/wiki/Q1417473","display_name":"Principle of maximum entropy","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s00521-025-11810-5","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s00521-025-11810-5","pdf_url":null,"source":{"id":"https://openalex.org/S147897268","display_name":"Neural Computing and Applications","issn_l":"0941-0643","issn":["0941-0643","1433-3058"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Neural Computing and Applications","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5513086915016174,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2010065958","https://openalex.org/W2513529237","https://openalex.org/W2539082945","https://openalex.org/W2885747980","https://openalex.org/W2912059729","https://openalex.org/W2944501892","https://openalex.org/W2974072230","https://openalex.org/W2981176263","https://openalex.org/W2983734430","https://openalex.org/W3000953536","https://openalex.org/W3002674187","https://openalex.org/W3002766903","https://openalex.org/W3010113023","https://openalex.org/W3021147902","https://openalex.org/W3027431742","https://openalex.org/W3040422908","https://openalex.org/W3044668093","https://openalex.org/W3083177412","https://openalex.org/W3106976604","https://openalex.org/W3118382796","https://openalex.org/W3133491520","https://openalex.org/W3191080082","https://openalex.org/W3210235841","https://openalex.org/W3215200159","https://openalex.org/W4200005928","https://openalex.org/W4220678224","https://openalex.org/W4220801425","https://openalex.org/W4226504147","https://openalex.org/W4293790419","https://openalex.org/W4303982438","https://openalex.org/W4310353354","https://openalex.org/W4315783485","https://openalex.org/W4386990971","https://openalex.org/W4396718820","https://openalex.org/W4410702581"],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-01-25T23:04:38.658462","created_date":"2026-01-24T00:00:00"}