{"id":"https://openalex.org/W4392970277","doi":"https://doi.org/10.1007/s11416-026-00635-y","title":"Semantic data representation for explainable windows malware detection models","display_name":"Semantic data representation for explainable windows malware detection models","publication_year":2026,"publication_date":"2026-06-28","ids":{"openalex":"https://openalex.org/W4392970277","doi":"https://doi.org/10.1007/s11416-026-00635-y"},"language":"en","primary_location":{"id":"doi:10.1007/s11416-026-00635-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11416-026-00635-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11416-026-00635-y.pdf","source":{"id":"https://openalex.org/S2764922190","display_name":"Journal of Computer Virology and Hacking Techniques","issn_l":"2263-8733","issn":["2263-8733"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Virology and Hacking Techniques","raw_type":"journal-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s11416-026-00635-y.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101689380","display_name":"Peter \u0160vec","orcid":"https://orcid.org/0000-0002-8315-5301"},"institutions":[{"id":"https://openalex.org/I110757952","display_name":"Slovak University of Technology in Bratislava","ror":"https://ror.org/0561ghm58","country_code":"SK","type":"education","lineage":["https://openalex.org/I110757952"]}],"countries":["SK"],"is_corresponding":true,"raw_author_name":"Peter \u0160vec","raw_affiliation_strings":["Institute of Computer Science and Mathematics, Faculty of Electrical Engineering and Information Technology, Slovak University of Technology, Ilkovi\u010dova 3, Bratislava, Slovakia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Computer Science and Mathematics, Faculty of Electrical Engineering and Information Technology, Slovak University of Technology, Ilkovi\u010dova 3, Bratislava, Slovakia","institution_ids":["https://openalex.org/I110757952"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078877757","display_name":"\u0160tefan Balogh","orcid":"https://orcid.org/0000-0003-0634-9476"},"institutions":[{"id":"https://openalex.org/I110757952","display_name":"Slovak University of Technology in Bratislava","ror":"https://ror.org/0561ghm58","country_code":"SK","type":"education","lineage":["https://openalex.org/I110757952"]}],"countries":["SK"],"is_corresponding":false,"raw_author_name":"\u0160tefan Balogh","raw_affiliation_strings":["Institute of Computer Science and Mathematics, Faculty of Electrical Engineering and Information Technology, Slovak University of Technology, Ilkovi\u010dova 3, Bratislava, Slovakia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Computer Science and Mathematics, Faculty of Electrical Engineering and Information Technology, Slovak University of Technology, Ilkovi\u010dova 3, Bratislava, Slovakia","institution_ids":["https://openalex.org/I110757952"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058838804","display_name":"Martin Homola","orcid":"https://orcid.org/0000-0001-6384-9771"},"institutions":[{"id":"https://openalex.org/I74788687","display_name":"Comenius University Bratislava","ror":"https://ror.org/0587ef340","country_code":"SK","type":"education","lineage":["https://openalex.org/I74788687"]}],"countries":["SK"],"is_corresponding":false,"raw_author_name":"Martin Homola","raw_affiliation_strings":["Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia","institution_ids":["https://openalex.org/I74788687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053009392","display_name":"J\u00e1n K\u013euka","orcid":"https://orcid.org/0000-0002-3406-3574"},"institutions":[{"id":"https://openalex.org/I74788687","display_name":"Comenius University Bratislava","ror":"https://ror.org/0587ef340","country_code":"SK","type":"education","lineage":["https://openalex.org/I74788687"]}],"countries":["SK"],"is_corresponding":false,"raw_author_name":"J\u00e1n Kl\u2019uka","raw_affiliation_strings":["Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia","institution_ids":["https://openalex.org/I74788687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094196079","display_name":"Tom\u00e1\u0161 Bist\u00e1k","orcid":null},"institutions":[{"id":"https://openalex.org/I74788687","display_name":"Comenius University Bratislava","ror":"https://ror.org/0587ef340","country_code":"SK","type":"education","lineage":["https://openalex.org/I74788687"]}],"countries":["SK"],"is_corresponding":false,"raw_author_name":"Tom\u00e1\u0161 Bist\u00e1k","raw_affiliation_strings":["Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia","institution_ids":["https://openalex.org/I74788687"]}]},{"author_position":"last","author":{"id":null,"display_name":"Peter Anthony","orcid":null},"institutions":[{"id":"https://openalex.org/I74788687","display_name":"Comenius University Bratislava","ror":"https://ror.org/0587ef340","country_code":"SK","type":"education","lineage":["https://openalex.org/I74788687"]}],"countries":["SK"],"is_corresponding":false,"raw_author_name":"Peter Anthony","raw_affiliation_strings":["Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University in Bratislava, Mlynsk\u00e1 dolina, Bratislava, Slovakia","institution_ids":["https://openalex.org/I74788687"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5101689380"],"corresponding_institution_ids":["https://openalex.org/I110757952"],"apc_list":{"value":2390,"currency":"EUR","value_usd":2990},"apc_paid":{"value":2390,"currency":"EUR","value_usd":2990},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00225447,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7987630367279053},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7199186682701111},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.6236631870269775},{"id":"https://openalex.org/keywords/external-data-representation","display_name":"External Data Representation","score":0.49346959590911865},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.3570217788219452},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.35212957859039307},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3342839777469635},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23917418718338013}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7987630367279053},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7199186682701111},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.6236631870269775},{"id":"https://openalex.org/C116409475","wikidata":"https://www.wikidata.org/wiki/Q1385056","display_name":"External Data Representation","level":2,"score":0.49346959590911865},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3570217788219452},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.35212957859039307},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3342839777469635},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23917418718338013},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s11416-026-00635-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11416-026-00635-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11416-026-00635-y.pdf","source":{"id":"https://openalex.org/S2764922190","display_name":"Journal of Computer Virology and Hacking Techniques","issn_l":"2263-8733","issn":["2263-8733"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Virology and Hacking Techniques","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2403.11669","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2403.11669","pdf_url":"https://arxiv.org/pdf/2403.11669","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2403.11669","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2403.11669","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1007/s11416-026-00635-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11416-026-00635-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11416-026-00635-y.pdf","source":{"id":"https://openalex.org/S2764922190","display_name":"Journal of Computer Virology and Hacking Techniques","issn_l":"2263-8733","issn":["2263-8733"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Virology and Hacking Techniques","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2564811589","display_name":null,"funder_award_id":"APVV-23-0292","funder_id":"https://openalex.org/F4320323641","funder_display_name":"Vedeck\u00e1 Grantov\u00e1 Agent\u00fara M\u0160VVa\u0160 SR a SAV"},{"id":"https://openalex.org/G6305388312","display_name":"Vysvetlite\u013enos\u0165 detekcie prienikov v po\u010d\u00edta\u010dovej bezpe\u010dnosti (eXSec)","funder_award_id":"1/0630/25","funder_id":"https://openalex.org/F4320323641","funder_display_name":"Vedeck\u00e1 Grantov\u00e1 Agent\u00fara M\u0160VVa\u0160 SR a SAV"},{"id":"https://openalex.org/G7665486045","display_name":"Dynamick\u00e1 Malv\u00e9rov\u00e1 Anal\u00fdza s vysvetlite\u013enou AI","funder_award_id":"APVV-23-0292","funder_id":"https://openalex.org/F4320323251","funder_display_name":"Agent\u00fara na Podporu V\u00fdskumu a V\u00fdvoja"},{"id":"https://openalex.org/G8088548421","display_name":null,"funder_award_id":"APVV-23-","funder_id":"https://openalex.org/F4320323251","funder_display_name":"Agent\u00fara na Podporu V\u00fdskumu a V\u00fdvoja"}],"funders":[{"id":"https://openalex.org/F4320321779","display_name":"Ministerstvo \u0161kolstva, vedy, v\u00fdskumu a \u0161portu Slovenskej republiky","ror":"https://ror.org/044gwpv05"},{"id":"https://openalex.org/F4320323251","display_name":"Agent\u00fara na Podporu V\u00fdskumu a V\u00fdvoja","ror":"https://ror.org/037nx0e70"},{"id":"https://openalex.org/F4320323641","display_name":"Vedeck\u00e1 Grantov\u00e1 Agent\u00fara M\u0160VVa\u0160 SR a SAV","ror":"https://ror.org/044gwpv05"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392970277.pdf","grobid_xml":"https://content.openalex.org/works/W4392970277.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2917844847","https://openalex.org/W2036757537","https://openalex.org/W2759085743","https://openalex.org/W2096451653","https://openalex.org/W4282930045","https://openalex.org/W4238546310"],"abstract_inverted_index":{"Abstract":[0],"Ontologies":[1],"are":[2,19],"a":[3,61,110,175],"standard":[4],"tool":[5],"for":[6,65,89,114],"creating":[7],"semantic":[8,63,112],"schemata":[9],"in":[10,24,132,147],"many":[11],"knowledge":[12,36],"intensive":[13],"domains":[14],"of":[15,83,100,125,166,188,200],"human":[16],"interest.":[17],"They":[18],"becoming":[20],"increasingly":[21],"important":[22],"also":[23,153],"the":[25,70,81,84,96,115,123,133,144,164,185,198,201,206],"areas":[26],"that":[27,59],"have":[28],"been":[29],"until":[30],"very":[31],"recently":[32],"dominated":[33],"by":[34,80,143],"subsymbolic":[35],"representation":[37,113],"and":[38,48,117,121,212],"machine-learning-based":[39],"data":[40],"processing.":[41],"One":[42],"such":[43],"area":[44],"is":[45,78],"information":[46],"security,":[47],"specifically,":[49],"malware":[50,74,98,208],"detection":[51,135],".":[52],"We":[53,170],"thus":[54],"propose":[55],"PE":[56,101],"Malware":[57,87],"Ontology":[58],"offers":[60],"reusable":[62],"schema":[64],"Portable":[66],"Executable":[67],"(PE":[68],"\u2013":[69],"Windows":[71],"binary":[72],"format)":[73],"files.":[75,102],"This":[76],"ontology":[77],"inspired":[79],"structure":[82],"dataset":[85],"Elastic":[86],"Benchmark":[88],"Empowering":[90],"Researchers":[91],"(EMBER),":[92],"which":[93,137],"focuses":[94],"on":[95,168],"static":[97],"analysis":[99],"With":[103],"this":[104],"proposal,":[105],"we":[106,152,192],"hope":[107],"to":[108,162,183,196],"provide":[109],"unified":[111],"existing":[116],"future":[118],"PE-malware":[119,134],"datasets":[120],"facilitate":[122],"application":[124],"symbolic,":[126],"neuro-symbolic,":[127],"or":[128],"otherwise":[129],"explainable":[130],"approaches":[131],"domain,":[136],"may":[138],"produce":[139],"interpretable":[140],"results":[141],"described":[142],"terms":[145],"defined":[146],"our":[148,172,189],"ontology.":[149],"In":[150],"addition,":[151],"publish":[154],"semantically":[155],"treated":[156],"EMBER":[157],"data,":[158],"including":[159],"fractional":[160],"datasets,":[161],"support":[163],"reproducibility":[165],"experiments":[167],"EMBER.":[169],"supplement":[171],"work":[173],"with":[174],"preliminary":[176],"case":[177],"study,":[178],"conducted":[179],"using":[180],"concept":[181],"learning,":[182],"show":[184],"general":[186],"feasibility":[187],"approach.":[190],"While":[191],"were":[193,210],"not":[194],"able":[195],"match":[197],"precision":[199],"state-of-the-art":[202],"machine":[203],"learning":[204],"tools,":[205],"learned":[207],"discriminators":[209],"interesting":[211],"highly":[213],"interpretable.":[214]},"counts_by_year":[],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-10T00:00:00"}