{"id":"https://openalex.org/W4308343232","doi":"https://doi.org/10.1080/09540091.2022.2139353","title":"Malware detection based on visualization of recombined API instruction sequence","display_name":"Malware detection based on visualization of recombined API instruction sequence","publication_year":2022,"publication_date":"2022-11-04","ids":{"openalex":"https://openalex.org/W4308343232","doi":"https://doi.org/10.1080/09540091.2022.2139353"},"language":"en","primary_location":{"id":"doi:10.1080/09540091.2022.2139353","is_oa":true,"landing_page_url":"https://doi.org/10.1080/09540091.2022.2139353","pdf_url":null,"source":{"id":"https://openalex.org/S4210188800","display_name":"Connection Science","issn_l":"0954-0091","issn":["0954-0091","1360-0494"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Connection Science","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1080/09540091.2022.2139353","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057118376","display_name":"Hongyu Yang","orcid":"https://orcid.org/0000-0002-6955-2503"},"institutions":[{"id":"https://openalex.org/I28813325","display_name":"Civil Aviation University of China","ror":"https://ror.org/03je71k37","country_code":"CN","type":"education","lineage":["https://openalex.org/I28813325"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Hongyu Yang","raw_affiliation_strings":["School of Computer Science and Technology, Civil Aviation University of China, Tianjin, People\u2019s Republic of China","School of Safety Science and Engineering, Civil Aviation University of China, Tianjin, People\u2019s Republic of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Civil Aviation University of China, Tianjin, People\u2019s Republic of China","institution_ids":["https://openalex.org/I28813325"]},{"raw_affiliation_string":"School of Safety Science and Engineering, Civil Aviation University of China, Tianjin, People\u2019s Republic of China","institution_ids":["https://openalex.org/I28813325"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052639870","display_name":"Yupei Zhang","orcid":"https://orcid.org/0000-0001-8348-0545"},"institutions":[{"id":"https://openalex.org/I28813325","display_name":"Civil Aviation University of China","ror":"https://ror.org/03je71k37","country_code":"CN","type":"education","lineage":["https://openalex.org/I28813325"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yupei Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Civil Aviation University of China, Tianjin, People\u2019s Republic of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Civil Aviation University of China, Tianjin, People\u2019s Republic of China","institution_ids":["https://openalex.org/I28813325"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100425167","display_name":"Liang Zhang","orcid":"https://orcid.org/0000-0001-9884-5199"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liang Zhang","raw_affiliation_strings":["School of Information, The University of Arizona, Tucson, AZ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information, The University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068110218","display_name":"Xiang Cheng","orcid":"https://orcid.org/0000-0002-5943-0326"},"institutions":[{"id":"https://openalex.org/I78978612","display_name":"Yangzhou University","ror":"https://ror.org/03tqb8s11","country_code":"CN","type":"education","lineage":["https://openalex.org/I78978612"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Cheng","raw_affiliation_strings":["School of Information Engineering, Yangzhou University, Yangzhou, People\u2019s Republic of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Yangzhou University, Yangzhou, People\u2019s Republic of China","institution_ids":["https://openalex.org/I78978612"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5057118376"],"corresponding_institution_ids":["https://openalex.org/I28813325"],"apc_list":{"value":1270,"currency":"USD","value_usd":1270},"apc_paid":{"value":1270,"currency":"USD","value_usd":1270},"fwci":0.8927,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.72809945,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"34","issue":"1","first_page":"2630","last_page":"2651"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8721914887428284},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7726757526397705},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.5798109769821167},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5296525359153748},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.503112256526947},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48111528158187866},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.47466161847114563},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4703403115272522},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.46672216057777405},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.44613343477249146},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4043124318122864},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19979378581047058}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8721914887428284},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7726757526397705},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.5798109769821167},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5296525359153748},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.503112256526947},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48111528158187866},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.47466161847114563},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4703403115272522},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.46672216057777405},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.44613343477249146},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4043124318122864},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19979378581047058},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1080/09540091.2022.2139353","is_oa":true,"landing_page_url":"https://doi.org/10.1080/09540091.2022.2139353","pdf_url":null,"source":{"id":"https://openalex.org/S4210188800","display_name":"Connection Science","issn_l":"0954-0091","issn":["0954-0091","1360-0494"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Connection Science","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e11563783e994b838a17b6455d21142b","is_oa":false,"landing_page_url":"https://doaj.org/article/e11563783e994b838a17b6455d21142b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Connection Science, Vol 34, Iss 1, Pp 2630-2651 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1080/09540091.2022.2139353","is_oa":true,"landing_page_url":"https://doi.org/10.1080/09540091.2022.2139353","pdf_url":null,"source":{"id":"https://openalex.org/S4210188800","display_name":"Connection Science","issn_l":"0954-0091","issn":["0954-0091","1360-0494"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Connection Science","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7416679183","display_name":null,"funder_award_id":"No.U1833107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W2618530766","https://openalex.org/W2796394805","https://openalex.org/W2899250976","https://openalex.org/W2963163009","https://openalex.org/W2963446712","https://openalex.org/W3033777149","https://openalex.org/W3037366188","https://openalex.org/W3045785127","https://openalex.org/W3088054835","https://openalex.org/W3112311055","https://openalex.org/W3113168908","https://openalex.org/W3121268010","https://openalex.org/W3129883375","https://openalex.org/W3135185324","https://openalex.org/W3156181280","https://openalex.org/W3184914355","https://openalex.org/W3186874092","https://openalex.org/W3200780444","https://openalex.org/W4200411312","https://openalex.org/W4205875715","https://openalex.org/W4206187163","https://openalex.org/W4214817610","https://openalex.org/W4234713688","https://openalex.org/W4295781220"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W3152891574","https://openalex.org/W2249809453","https://openalex.org/W4284893819","https://openalex.org/W4316881845"],"abstract_inverted_index":{"This":[0],"paper":[1],"introduces":[2],"a":[3,72],"malware":[4,30,124,154],"detection":[5,31,38,136,151],"method":[6,140],"based":[7,102],"on":[8,103],"the":[9,23,41,46,62,75,79,82,91,104,111,121,135],"reorganisation":[10],"of":[11,29,34,45,66,69,74,84,138],"API":[12,53,56,85,92,94,97,106],"instruction":[13,107],"sequence":[14,108],"and":[15,37,96,143,150],"image":[16,116,126],"representation":[17],"in":[18,32],"an":[19,52],"effort":[20],"to":[21,61,78,109],"address":[22],"challenges":[24],"posed":[25],"by":[26],"current":[27],"methods":[28],"terms":[33],"feature":[35,112,115,125],"extraction":[36],"accuracy.":[39],"In":[40],"first":[42],"step,":[43],"APIs":[44],"same":[47],"type":[48,68],"are":[49,100],"grouped":[50],"into":[51,120],"block.":[54],"Each":[55],"block":[57,86],"is":[58,88,117,141],"reorganised":[59,105],"according":[60],"\ufb01rst":[63],"invocation":[64],"order":[65],"each":[67],"API.":[70],"As":[71],"measure":[73],"API's":[76],"devotion":[77],"software":[80],"sample,":[81],"number":[83],"entries":[87],"recorded.":[89],"Second,":[90],"codes,":[93],"devotions,":[95],"sequential":[98],"indexes":[99],"extracted":[101],"generate":[110],"image.":[113],"The":[114,130],"then":[118],"fed":[119],"self-built":[122],"lightweight":[123],"convolution":[127],"neural":[128],"network.":[129],"experimental":[131],"results":[132],"indicate":[133],"that":[134,144],"accuracy":[137],"this":[139],"98.66%":[142],"it":[145],"has":[146],"high":[147],"performance":[148],"indicators":[149],"speed":[152],"for":[153],"detection.":[155]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}