{"id":"https://openalex.org/W4403811728","doi":"https://doi.org/10.1016/j.jisa.2026.104517","title":"Model X-Ray: Detection of hidden malware in AI model weights using few shot learning","display_name":"Model X-Ray: Detection of hidden malware in AI model weights using few shot learning","publication_year":2026,"publication_date":"2026-05-30","ids":{"openalex":"https://openalex.org/W4403811728","doi":"https://doi.org/10.1016/j.jisa.2026.104517"},"language":"en","primary_location":{"id":"doi:10.1016/j.jisa.2026.104517","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.jisa.2026.104517","pdf_url":null,"source":{"id":"https://openalex.org/S4210191536","display_name":"Journal of Information Security and Applications","issn_l":"2214-2126","issn":["2214-2126","2214-2134"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Security and Applications","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.jisa.2026.104517","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093006059","display_name":"Daniel Gilkarov","orcid":"https://orcid.org/0009-0008-9274-802X"},"institutions":[{"id":"https://openalex.org/I52170813","display_name":"Ariel University","ror":"https://ror.org/03nz8qe97","country_code":"IL","type":"education","lineage":["https://openalex.org/I52170813"]}],"countries":["IL"],"is_corresponding":true,"raw_author_name":"Daniel Gilkarov","raw_affiliation_strings":["Ariel Cyber Innovation Center, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel","Department of Computer and Software Engineering, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel"],"raw_orcid":"https://orcid.org/0009-0008-9274-802X","affiliations":[{"raw_affiliation_string":"Ariel Cyber Innovation Center, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel","institution_ids":["https://openalex.org/I52170813"]},{"raw_affiliation_string":"Department of Computer and Software Engineering, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel","institution_ids":["https://openalex.org/I52170813"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027608715","display_name":"Ran Dubin","orcid":"https://orcid.org/0000-0002-2055-2211"},"institutions":[{"id":"https://openalex.org/I52170813","display_name":"Ariel University","ror":"https://ror.org/03nz8qe97","country_code":"IL","type":"education","lineage":["https://openalex.org/I52170813"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Ran Dubin","raw_affiliation_strings":["Ariel Cyber Innovation Center, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel","Department of Computer and Software Engineering, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel"],"raw_orcid":"https://orcid.org/0000-0002-2055-2211","affiliations":[{"raw_affiliation_string":"Ariel Cyber Innovation Center, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel","institution_ids":["https://openalex.org/I52170813"]},{"raw_affiliation_string":"Department of Computer and Software Engineering, Ariel University, Kiryat HaMada 3, Ariel, 40700, Israel","institution_ids":["https://openalex.org/I52170813"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5093006059"],"corresponding_institution_ids":["https://openalex.org/I52170813"],"apc_list":{"value":2860,"currency":"USD","value_usd":2860},"apc_paid":{"value":2860,"currency":"USD","value_usd":2860},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00751001,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"101","issue":null,"first_page":"104517","last_page":"104517"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9451000094413757,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9451000094413757,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.901199996471405,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/shot","display_name":"Shot (pellet)","score":0.832756519317627},{"id":"https://openalex.org/keywords/one-shot","display_name":"One shot","score":0.7302128672599792},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6643155813217163},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5886462330818176},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5189728140830994},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.36873817443847656},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32963213324546814},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1721605360507965},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1314065158367157},{"id":"https://openalex.org/keywords/materials-science","display_name":"Materials science","score":0.07820495963096619}],"concepts":[{"id":"https://openalex.org/C2778344882","wikidata":"https://www.wikidata.org/wiki/Q278938","display_name":"Shot (pellet)","level":2,"score":0.832756519317627},{"id":"https://openalex.org/C2992734406","wikidata":"https://www.wikidata.org/wiki/Q413267","display_name":"One shot","level":2,"score":0.7302128672599792},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6643155813217163},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5886462330818176},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5189728140830994},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.36873817443847656},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32963213324546814},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1721605360507965},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1314065158367157},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.07820495963096619},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C191897082","wikidata":"https://www.wikidata.org/wiki/Q11467","display_name":"Metallurgy","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1016/j.jisa.2026.104517","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.jisa.2026.104517","pdf_url":null,"source":{"id":"https://openalex.org/S4210191536","display_name":"Journal of Information Security and Applications","issn_l":"2214-2126","issn":["2214-2126","2214-2134"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Security and Applications","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2409.19310","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.19310","pdf_url":"https://arxiv.org/pdf/2409.19310","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null},{"id":"pmh:oai:arXiv.org:2409.19310","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2409.19310","pdf_url":"https://arxiv.org/pdf/2409.19310","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2409.19310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2409.19310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1016/j.jisa.2026.104517","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.jisa.2026.104517","pdf_url":null,"source":{"id":"https://openalex.org/S4210191536","display_name":"Journal of Information Security and Applications","issn_l":"2214-2126","issn":["2214-2126","2214-2134"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Security and Applications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2497720472","https://openalex.org/W4292659306","https://openalex.org/W3044321615","https://openalex.org/W2806221744","https://openalex.org/W2326937258","https://openalex.org/W394267150","https://openalex.org/W2773965352","https://openalex.org/W4294892107","https://openalex.org/W2357748469","https://openalex.org/W2392917037"],"abstract_inverted_index":{"AI":[0],"model":[1,30,103],"repositories":[2],"such":[3],"as":[4,99,101,229],"Hugging":[5],"Face":[6],"and":[7,44,86,105,135,139,150,187],"TensorFlow":[8],"Hub":[9],"have":[10],"become":[11],"an":[12],"attractive":[13],"surface":[14],"for":[15,217],"steganographic":[16],"malware:":[17],"attackers":[18],"exploit":[19],"the":[20,130,141,146,198,203,211],"redundancy":[21],"in":[22,116],"float32":[23,79],"weights":[24,80],"to":[25,81,110,158,179,208],"embed":[26],"payloads":[27],"while":[28],"preserving":[29],"accuracy.":[31,153],"Existing":[32],"AI-model":[33,213],"steganalysis":[34,214],"methods":[35],"require":[36],"tens":[37],"of":[38,40],"thousands":[39],"labeled":[41],"training":[42,164],"samples":[43],"only":[45,165],"detect":[46],"attacks":[47,108,162],"at":[48,183,202],"high":[49],"embedding":[50,112],"rates":[51],"(":[52],"\u2265":[53],"50%),":[54],"limiting":[55],"their":[56],"practical":[57,216],"utility.":[58],"We":[59,68,119],"address":[60],"both":[61],"gaps":[62],"with":[63,89,114],"a":[64,70,82,90,122],"few-shot":[65,92],"learning":[66],"approach.":[67],"propose":[69],"novel":[71,159],"parameter-position-stable":[72],"image":[73],"representation,":[74],"Grayscale-Fourpart":[75],"(GF),":[76],"that":[77,173],"maps":[78],"square":[83],"grayscale":[84],"image,":[85],"pair":[87],"it":[88],"metric-learning":[91],"CNN":[93],"detector.":[94],"The":[95,154,220],"detector":[96],"trains":[97],"from":[98],"few":[100],"6":[102],"files":[104],"consistently":[106],"flags":[107],"down":[109],"25%":[111],"rate,":[113],"6%":[115],"some":[117],"cases.":[118],"benchmark":[120],"against":[121],"seven-baseline":[123],"matrix":[124],"spanning":[125],"two":[126],"prior":[127,200],"academic":[128],"method,":[129],"canonical":[131],"raw-byte":[132],"1D-CNN":[133],"paradigm,":[134],"four":[136],"threshold-based":[137],"statistics,":[138],"identify":[140],"conjoint":[142],"conditions":[143],"under":[144],"which":[145],"simpler":[147],"baselines":[148],"collapse":[149],"ours":[151],"retains":[152],"trained":[155],"detectors":[156],"transfer":[157],"out-of-distribution":[160],"spread-spectrum":[161],"despite":[163],"on":[166],"LSB":[167],"perturbations.":[168],"A":[169],"deployment-feasibility":[170],"study":[171],"shows":[172],"GF":[174],"feature":[175],"extraction":[176],"scales":[177],"linearly":[178],"10":[180],"8":[181],"parameters":[182],"\u2248":[184],"0.49":[185],"s":[186],"\u223c":[188,193],"1.77":[189],"GiB":[190],"peak":[191],"memory,":[192],"352":[194],"\u00d7":[195],"faster":[196],"than":[197],"strongest":[199],"baseline":[201,225],"same":[204],"scale,":[205],"making":[206],"this,":[207],"our":[209],"knowledge,":[210],"first":[212],"pipeline":[215],"repository-scale":[218],"deployment.":[219],"full":[221],"code":[222],"framework,":[223],"including":[224],"reproductions,":[226],"is":[227],"released":[228],"open-source.":[230]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2024-10-28T00:00:00"}