{"id":"https://openalex.org/W4408532583","doi":"https://doi.org/10.1007/s44196-025-00781-z","title":"A Deep Learning Model Leveraging Time-Series System Call Data to Detect Malware Attacks in Virtual Machines","display_name":"A Deep Learning Model Leveraging Time-Series System Call Data to Detect Malware Attacks in Virtual Machines","publication_year":2025,"publication_date":"2025-03-17","ids":{"openalex":"https://openalex.org/W4408532583","doi":"https://doi.org/10.1007/s44196-025-00781-z"},"language":"en","primary_location":{"id":"doi:10.1007/s44196-025-00781-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44196-025-00781-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s44196-025-00781-z.pdf","source":{"id":"https://openalex.org/S190680769","display_name":"International Journal of Computational Intelligence Systems","issn_l":"1875-6883","issn":["1875-6883","1875-6891"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://link.springer.com/content/pdf/10.1007/s44196-025-00781-z.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033363975","display_name":"A. Alfred Raja Melvin","orcid":"https://orcid.org/0000-0002-8500-1082"},"institutions":[{"id":"https://openalex.org/I119668213","display_name":"Karunya University","ror":"https://ror.org/03k23nv15","country_code":"IN","type":"education","lineage":["https://openalex.org/I119668213"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"A. Alfred Raja Melvin","raw_affiliation_strings":["Division of Computer Science and Engineering, Karunya Institute of Technology and Sciences, Coimbatore, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer Science and Engineering, Karunya Institute of Technology and Sciences, Coimbatore, India","institution_ids":["https://openalex.org/I119668213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074457906","display_name":"G. Jaspher W. Kathrine","orcid":"https://orcid.org/0000-0003-3055-0356"},"institutions":[{"id":"https://openalex.org/I119668213","display_name":"Karunya University","ror":"https://ror.org/03k23nv15","country_code":"IN","type":"education","lineage":["https://openalex.org/I119668213"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Jaspher W. Kathrine","raw_affiliation_strings":["Division of Computer Science and Engineering, Karunya Institute of Technology and Sciences, Coimbatore, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer Science and Engineering, Karunya Institute of Technology and Sciences, Coimbatore, India","institution_ids":["https://openalex.org/I119668213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115673999","display_name":"Andrew Jeyabose","orcid":"https://orcid.org/0000-0003-3592-6543"},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]},{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN","US"],"is_corresponding":true,"raw_author_name":"Andrew Jeyabose","raw_affiliation_strings":["Department of Computer Science and Engineering, Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, Karnataka, 576104, India","Department of Neurology, School of Medicine, University of North Carolina, Chapel Hill, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, Karnataka, 576104, India","institution_ids":["https://openalex.org/I164861460"]},{"raw_affiliation_string":"Department of Neurology, School of Medicine, University of North Carolina, Chapel Hill, NC, USA","institution_ids":["https://openalex.org/I114027177"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050353553","display_name":"D. Cenitta","orcid":"https://orcid.org/0000-0003-3715-6941"},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"D. Cenitta","raw_affiliation_strings":["Department of Computer Science and Engineering, Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, Karnataka, 576104, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, Karnataka, 576104, India","institution_ids":["https://openalex.org/I164861460"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5050353553","https://openalex.org/A5115673999"],"corresponding_institution_ids":["https://openalex.org/I114027177","https://openalex.org/I164861460"],"apc_list":{"value":2090,"currency":"USD","value_usd":2090},"apc_paid":{"value":2090,"currency":"USD","value_usd":2090},"fwci":4.1092,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.93778352,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"18","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8274210691452026},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7934081554412842},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.701444149017334},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5278092622756958},{"id":"https://openalex.org/keywords/series","display_name":"Series (stratigraphy)","score":0.5176882743835449},{"id":"https://openalex.org/keywords/time-series","display_name":"Time series","score":0.515089213848114},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4960390031337738},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4265727996826172},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.4113713502883911},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38059234619140625},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3767879605293274},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17037060856819153}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8274210691452026},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7934081554412842},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.701444149017334},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5278092622756958},{"id":"https://openalex.org/C143724316","wikidata":"https://www.wikidata.org/wiki/Q312468","display_name":"Series (stratigraphy)","level":2,"score":0.5176882743835449},{"id":"https://openalex.org/C151406439","wikidata":"https://www.wikidata.org/wiki/Q186588","display_name":"Time series","level":2,"score":0.515089213848114},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4960390031337738},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4265727996826172},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.4113713502883911},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38059234619140625},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3767879605293274},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17037060856819153},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s44196-025-00781-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44196-025-00781-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s44196-025-00781-z.pdf","source":{"id":"https://openalex.org/S190680769","display_name":"International Journal of Computational Intelligence Systems","issn_l":"1875-6883","issn":["1875-6883","1875-6891"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:819facc831794f8dbbe11bc9e5c3c62b","is_oa":true,"landing_page_url":"https://doaj.org/article/819facc831794f8dbbe11bc9e5c3c62b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Journal of Computational Intelligence Systems, Vol 18, Iss 1, Pp 1-22 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1007/s44196-025-00781-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44196-025-00781-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s44196-025-00781-z.pdf","source":{"id":"https://openalex.org/S190680769","display_name":"International Journal of Computational Intelligence Systems","issn_l":"1875-6883","issn":["1875-6883","1875-6891"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4408532583.pdf"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W1941427975","https://openalex.org/W2043491664","https://openalex.org/W2129860818","https://openalex.org/W2167240430","https://openalex.org/W2317750305","https://openalex.org/W2766465617","https://openalex.org/W2912528408","https://openalex.org/W2914521857","https://openalex.org/W2926701059","https://openalex.org/W2953931649","https://openalex.org/W2979560086","https://openalex.org/W2988790801","https://openalex.org/W3161576650","https://openalex.org/W4391677521","https://openalex.org/W4396645601"],"related_works":["https://openalex.org/W2439951656","https://openalex.org/W1573526548","https://openalex.org/W4360982091","https://openalex.org/W3176864451","https://openalex.org/W2053632570","https://openalex.org/W3211525895","https://openalex.org/W2187910102","https://openalex.org/W2128507946","https://openalex.org/W4254552916","https://openalex.org/W3158610871"],"abstract_inverted_index":{"Abstract":[0],"A":[1,143],"Tenant":[2],"Virtual":[3],"Machine":[4],"(TVM)":[5],"user":[6],"in":[7,190],"the":[8,32,45,69,84,104,140,152,181],"cloud":[9,33],"may":[10,47],"misuse":[11],"its":[12,61],"computing":[13,29],"power":[14],"to":[15,60,101,150],"launch":[16],"malware":[17,52],"attack":[18],"against":[19],"other":[20,28],"tenant":[21],"VMs,":[22],"Host":[23],"OS,":[24],"Hypervisor,":[25],"or":[26,56],"any":[27],"devices/resources":[30],"inside":[31],"environment":[34],"of":[35,106,164,192],"a":[36,95,132],"Cloud":[37],"Service":[38],"Provider.":[39],"The":[40,114,171],"security":[41,65],"solutions":[42,66],"deployed":[43,67],"within":[44,111],"TVM":[46],"not":[48],"be":[49],"reliable,":[50],"as":[51],"can":[53],"disable":[54],"them":[55],"remain":[57],"undetected":[58],"due":[59],"hidden":[62],"nature.":[63],"Therefore,":[64],"outside":[68],"virtual":[70,112],"machine":[71,177],"are":[72,120],"necessary.":[73],"This":[74],"research":[75],"proposes":[76],"deploying":[77],"an":[78],"Intrusion":[79],"Detection":[80],"System":[81,126],"(IDS)":[82],"at":[83],"Hypervisor":[85],"layer,":[86],"utilizing":[87,197],"time":[88,199],"series":[89,200],"system":[90,117,201],"call":[91,118,202],"data":[92],"and":[93,129,138,168,183,185],"employing":[94],"Convolutional":[96],"Neural":[97],"Network":[98],"(CNN)":[99],"model":[100,154,173],"accurately":[102],"detect":[103],"presence":[105],"malicious":[107],"(malware)":[108],"computer":[109],"programs":[110],"machines.":[113],"raw":[115],"VMM":[116],"traces":[119],"transformed":[121],"into":[122],"novel":[123,198],"Time":[124],"Series":[125],"Call":[127],"patterns":[128],"utilized":[130],"by":[131],"deep":[133,144],"learning":[134,145,178],"algorithm":[135],"for":[136,155,180],"training":[137],"building":[139],"classifier":[141,153],"model.":[142],"model,":[146],"CNN,":[147],"is":[148,162,174],"used":[149],"build":[151],"detecting":[156,165],"intrusions":[157],"with":[158,176],"high":[159],"accuracy.":[160],"It":[161],"capable":[163],"both":[166],"known":[167],"unknown":[169],"malware.":[170],"CNN":[172],"compared":[175],"algorithms":[179,189],"results":[182],"discussions,":[184],"it":[186],"outperforms":[187],"ML":[188],"terms":[191],"intrusion":[193],"detection":[194],"accuracy":[195],"when":[196],"data..":[203]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}