{"id":"https://openalex.org/W4410929914","doi":"https://doi.org/10.1007/s10791-025-09615-0","title":"An Ensemble technique for imbalanced multiclass malware classification by leveraging API call semantics","display_name":"An Ensemble technique for imbalanced multiclass malware classification by leveraging API call semantics","publication_year":2025,"publication_date":"2025-06-01","ids":{"openalex":"https://openalex.org/W4410929914","doi":"https://doi.org/10.1007/s10791-025-09615-0"},"language":"en","primary_location":{"id":"doi:10.1007/s10791-025-09615-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09615-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09615-0.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09615-0.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076223900","display_name":"Sudhanshu Shekhar Bisoyi","orcid":"https://orcid.org/0000-0002-7688-7379"},"institutions":[{"id":"https://openalex.org/I193073490","display_name":"Siksha O Anusandhan University","ror":"https://ror.org/056ep7w45","country_code":"IN","type":"education","lineage":["https://openalex.org/I193073490"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sudhanshu Shekhar Bisoyi","raw_affiliation_strings":["Department of Computer Science and Information Technology, ITER, Siksha \u2019O\u2019 Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","Department of Computer Science and Information Technology, ITER, Siksha 'O' Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Technology, ITER, Siksha \u2019O\u2019 Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","institution_ids":["https://openalex.org/I193073490"]},{"raw_affiliation_string":"Department of Computer Science and Information Technology, ITER, Siksha 'O' Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","institution_ids":["https://openalex.org/I193073490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062710433","display_name":"Binayak Panda","orcid":"https://orcid.org/0000-0001-6027-3148"},"institutions":[{"id":"https://openalex.org/I193073490","display_name":"Siksha O Anusandhan University","ror":"https://ror.org/056ep7w45","country_code":"IN","type":"education","lineage":["https://openalex.org/I193073490"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Binayak Panda","raw_affiliation_strings":["Department of Computer Science and Engineering, ITER, Siksha \u2019O\u2019 Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","Department of Computer Science and Engineering, ITER, Siksha 'O' Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, ITER, Siksha \u2019O\u2019 Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","institution_ids":["https://openalex.org/I193073490"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, ITER, Siksha 'O' Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","institution_ids":["https://openalex.org/I193073490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061087656","display_name":"Bichitrananda Patra","orcid":"https://orcid.org/0000-0001-6414-5389"},"institutions":[{"id":"https://openalex.org/I193073490","display_name":"Siksha O Anusandhan University","ror":"https://ror.org/056ep7w45","country_code":"IN","type":"education","lineage":["https://openalex.org/I193073490"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Bichitrananda Patra","raw_affiliation_strings":["Department of Computer Application, ITER, Siksha \u2019O\u2019 Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","Department of Computer Application, ITER, Siksha 'O' Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Application, ITER, Siksha \u2019O\u2019 Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","institution_ids":["https://openalex.org/I193073490"]},{"raw_affiliation_string":"Department of Computer Application, ITER, Siksha 'O' Anusandhan (Deemed to be) University, Bhubaneswar, 751019, Odisha, India","institution_ids":["https://openalex.org/I193073490"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038667922","display_name":"Pragnyaban Mishra","orcid":"https://orcid.org/0000-0002-3733-6558"},"institutions":[{"id":"https://openalex.org/I885392262","display_name":"GITAM University","ror":"https://ror.org/0440p1d37","country_code":"IN","type":"education","lineage":["https://openalex.org/I885392262"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Pragnyaban Mishra","raw_affiliation_strings":["Department of Computer Science and Engineering, GITAM (Deemed to be) University, Visakhapatnam, 530045, Andhra Pradesh, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, GITAM (Deemed to be) University, Visakhapatnam, 530045, Andhra Pradesh, India","institution_ids":["https://openalex.org/I885392262"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5062710433"],"corresponding_institution_ids":["https://openalex.org/I193073490"],"apc_list":null,"apc_paid":null,"fwci":5.4146,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.9617442,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"28","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7826415300369263},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7305940389633179},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.5384715795516968},{"id":"https://openalex.org/keywords/multiclass-classification","display_name":"Multiclass classification","score":0.48495009541511536},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47873637080192566},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.39321503043174744},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3357824683189392},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.30054086446762085},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.15261924266815186},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14764252305030823}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7826415300369263},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7305940389633179},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.5384715795516968},{"id":"https://openalex.org/C123860398","wikidata":"https://www.wikidata.org/wiki/Q6934605","display_name":"Multiclass classification","level":3,"score":0.48495009541511536},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47873637080192566},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.39321503043174744},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3357824683189392},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.30054086446762085},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15261924266815186},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14764252305030823}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10791-025-09615-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09615-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09615-0.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10791-025-09615-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09615-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09615-0.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4410929914.pdf","grobid_xml":"https://content.openalex.org/works/W4410929914.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W1573526548","https://openalex.org/W1582350176","https://openalex.org/W1652196843","https://openalex.org/W2000052253","https://openalex.org/W2014395806","https://openalex.org/W2051223603","https://openalex.org/W2084979543","https://openalex.org/W2110978214","https://openalex.org/W2119954997","https://openalex.org/W2152442131","https://openalex.org/W2215444025","https://openalex.org/W2557513839","https://openalex.org/W2586522165","https://openalex.org/W2586571469","https://openalex.org/W2732916693","https://openalex.org/W2753669113","https://openalex.org/W2788141255","https://openalex.org/W2790918693","https://openalex.org/W2900633536","https://openalex.org/W2902529532","https://openalex.org/W2917661079","https://openalex.org/W2972552958","https://openalex.org/W3035116401","https://openalex.org/W3045322569","https://openalex.org/W3089246867","https://openalex.org/W3125564951","https://openalex.org/W3171309826","https://openalex.org/W3198200730","https://openalex.org/W4205839607","https://openalex.org/W4288070321","https://openalex.org/W4312707592","https://openalex.org/W4313216189","https://openalex.org/W4318407315","https://openalex.org/W4367595786","https://openalex.org/W4390317718","https://openalex.org/W4390954474","https://openalex.org/W4393970627","https://openalex.org/W4405704050"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2039745824","https://openalex.org/W3157224608","https://openalex.org/W2623163150","https://openalex.org/W2186666570","https://openalex.org/W4247599326"],"abstract_inverted_index":{"The":[0,109],"continuous":[1],"evolution":[2],"of":[3,15,29,127,144],"malicious":[4],"programs":[5],"(malware":[6],"families)":[7],"poses":[8],"a":[9,57,100,119,162],"significant":[10],"threat":[11],"to":[12,67,104,135,146],"the":[13,36,79,84,95,124,141,147,169],"security":[14],"computing":[16],"environments.":[17],"Machine":[18,86],"learning":[19,22,87,90,130,133],"and":[20,77,88,131,159,174,180,189],"deep":[21,89,129],"methods":[23],"are":[24,177,186],"gaining":[25],"popularity":[26],"in":[27,72,83],"terms":[28],"effective":[30],"classification":[31,39,107,125,138],"among":[32],"malware":[33,38],"families.":[34],"However,":[35],"multiclass":[37],"problem,":[40],"considering":[41],"imbalanced":[42],"complex":[43],"Application":[44],"Program":[45],"Interface(API)":[46],"call":[47,75],"sequences,":[48],"is":[49,118],"an":[50],"ongoing":[51],"research":[52],"challenge.":[53],"This":[54],"article":[55],"proposes":[56],"data":[58],"preprocessing":[59],"technique":[60,117],"called":[61],"Continuous":[62],"Duplicate":[63],"Subsequence":[64],"Removal":[65],"(CDSR)":[66],"remove":[68],"obfuscated":[69],"API":[70,74,97,155],"calls":[71],"dynamic":[73,154],"sequences":[76],"address":[78],"horizontal":[80],"imbalance":[81],"problem":[82],"dataset.":[85],"models":[91,134],"were":[92],"trained":[93],"using":[94],"Skip-gram":[96],"embeddings":[98],"as":[99],"feature":[101],"weight":[102],"matrix":[103],"ensure":[105,136],"improved":[106],"capabilities.":[108],"proposed":[110],"Ensemble":[111],"Probability":[112],"for":[113,167,183],"Class":[114],"Prediction":[115],"(EPCP)":[116],"novel":[120],"method":[121],"that":[122],"ensembles":[123],"probabilities":[126],"several":[128],"machine":[132],"better":[137],"results.":[139],"Comparing":[140],"experimental":[142],"findings":[143],"EPCP":[145],"most":[148],"well-known":[149],"results":[150],"on":[151],"two":[152],"benchmark":[153],"sequence":[156],"datasets,":[157],"MAL-API-2019":[158],"APIMDS,":[160,184],"reveals":[161],"notable":[163],"performance":[164],"improvement.":[165],"Additionally,":[166],"MAL-API-2019,":[168],"average":[170],"$$F_1$$":[171],"score,":[172],"accuracy,":[173],"AUC":[175],"scores":[176],"67%,":[178],"68%,":[179],"91%,":[181,187],"while":[182],"they":[185],"80%,":[188],"97%,":[190],"respectively.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-13T06:13:01.061226","created_date":"2025-10-10T00:00:00"}