{"id":"https://openalex.org/W2959221393","doi":"https://doi.org/10.1109/access.2019.2927552","title":"Malware Classification Using Probability Scoring and Machine Learning","display_name":"Malware Classification Using Probability Scoring and Machine Learning","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2959221393","doi":"https://doi.org/10.1109/access.2019.2927552","mag":"2959221393"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2927552","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2927552","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08758215.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08758215.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089386832","display_name":"Di Xue","orcid":"https://orcid.org/0000-0002-6430-5466"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Di Xue","raw_affiliation_strings":["College of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-6430-5466","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101526011","display_name":"Jingmei Li","orcid":"https://orcid.org/0000-0002-7246-3093"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingmei Li","raw_affiliation_strings":["College of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-7246-3093","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055650255","display_name":"Tu Lv","orcid":null},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tu Lv","raw_affiliation_strings":["College of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000318376","display_name":"Weifei Wu","orcid":"https://orcid.org/0000-0002-6217-0043"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weifei Wu","raw_affiliation_strings":["College of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100784264","display_name":"Jiaxiang Wang","orcid":"https://orcid.org/0000-0003-3059-798X"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxiang Wang","raw_affiliation_strings":["College of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I151727225"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":4.4173,"has_fulltext":true,"cited_by_count":67,"citation_normalized_percentile":{"value":0.95481644,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"91641","last_page":"91656"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9801999926567078,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8698802590370178},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.8278955817222595},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8066301941871643},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5919960141181946},{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.5501117706298828},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5355297327041626},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5265237092971802},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.44928693771362305},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.4386879801750183},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.41937461495399475},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3853096067905426},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38121822476387024},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1726216971874237}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8698802590370178},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.8278955817222595},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8066301941871643},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5919960141181946},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.5501117706298828},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5355297327041626},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5265237092971802},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.44928693771362305},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.4386879801750183},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.41937461495399475},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3853096067905426},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38121822476387024},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1726216971874237},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2927552","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2927552","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08758215.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:49f51d4857204a9d91767ba03be0e558","is_oa":true,"landing_page_url":"https://doaj.org/article/49f51d4857204a9d91767ba03be0e558","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 91641-91656 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2927552","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2927552","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08758215.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2959221393.pdf","grobid_xml":"https://content.openalex.org/works/W2959221393.grobid-xml"},"referenced_works_count":66,"referenced_works":["https://openalex.org/W110909300","https://openalex.org/W1545528966","https://openalex.org/W1573526548","https://openalex.org/W1686810756","https://openalex.org/W1836465849","https://openalex.org/W2010065958","https://openalex.org/W2012132268","https://openalex.org/W2021436318","https://openalex.org/W2026875669","https://openalex.org/W2043756236","https://openalex.org/W2045140281","https://openalex.org/W2045256553","https://openalex.org/W2109255472","https://openalex.org/W2121227244","https://openalex.org/W2135814109","https://openalex.org/W2150188172","https://openalex.org/W2150423842","https://openalex.org/W2301473744","https://openalex.org/W2407059953","https://openalex.org/W2425931228","https://openalex.org/W2487124337","https://openalex.org/W2508015754","https://openalex.org/W2520563735","https://openalex.org/W2545150312","https://openalex.org/W2557513839","https://openalex.org/W2568998043","https://openalex.org/W2603160474","https://openalex.org/W2609997969","https://openalex.org/W2638718630","https://openalex.org/W2734713605","https://openalex.org/W2747715470","https://openalex.org/W2761652379","https://openalex.org/W2765820957","https://openalex.org/W2765921396","https://openalex.org/W2766576889","https://openalex.org/W2769312722","https://openalex.org/W2770472157","https://openalex.org/W2775173651","https://openalex.org/W2783615536","https://openalex.org/W2786476294","https://openalex.org/W2792657554","https://openalex.org/W2795033129","https://openalex.org/W2804769055","https://openalex.org/W2808915780","https://openalex.org/W2885890803","https://openalex.org/W2887382161","https://openalex.org/W2900275727","https://openalex.org/W2953506610","https://openalex.org/W2962880130","https://openalex.org/W2963204406","https://openalex.org/W2963961561","https://openalex.org/W4212883601","https://openalex.org/W4239799938","https://openalex.org/W6637373629","https://openalex.org/W6638667902","https://openalex.org/W6678277124","https://openalex.org/W6717607367","https://openalex.org/W6728900975","https://openalex.org/W6731902473","https://openalex.org/W6737387601","https://openalex.org/W6739480119","https://openalex.org/W6748232670","https://openalex.org/W6753526238","https://openalex.org/W6764790969","https://openalex.org/W7019477027","https://openalex.org/W7070897283"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2289039654","https://openalex.org/W2728713145","https://openalex.org/W2470502009","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W4360993664"],"abstract_inverted_index":{"Malware":[0],"classification":[1,51,63],"plays":[2],"an":[3],"important":[4],"role":[5],"in":[6,21,27,57,109,130,153,215],"tracing":[7],"the":[8,35,68,76,104,113,123,143,151,166,183,199,245],"attack":[9],"sources":[10],"of":[11,150,247,261],"computer":[12],"security.":[13],"However,":[14],"existing":[15],"static":[16,81,135,144,172,194,216,249],"analysis":[17,37,82,88,136,139,145,175],"methods":[18,38],"are":[19,25],"fast":[20],"classification,":[22],"but":[23,46,156],"they":[24,47],"inefficient":[26],"some":[28],"malware":[29,178,186,206,223,227,238],"using":[30,248],"packing":[31,43],"and":[32,44,71,86,112,116,173,250,255,263],"obfuscation":[33,164],"techniques;":[34],"dynamic":[36,87,138,167,174,251],"have":[39],"better":[40],"universality":[41],"for":[42,237],"obfuscation,":[45],"will":[48,187],"cause":[49],"excessive":[50],"cost.":[52],"To":[53],"overcome":[54],"these":[55],"shortcomings,":[56],"this":[58],"paper,":[59],"we":[60,196],"propose":[61],"a":[62,204,259],"system":[64],"Malscore":[65,133,233,241],"based":[66],"on":[67,221],"probability":[69,77],"scoring":[70],"machine":[72,117],"learning,":[73],"which":[74],"sets":[75],"threshold":[78],"to":[79,102,121,159,163,182],"concatenate":[80],"(called":[83,89],"Phase":[84,90,110,131],"1)":[85],"2).":[91],"The":[92,229,253],"convolutional":[93],"neural":[94],"networks":[95],"with":[96,137,244],"spatial":[97],"pyramid":[98],"pooling":[99],"were":[100,119],"used":[101,120],"analyze":[103,122],"grayscale":[105],"images":[106],"(static":[107],"features)":[108,129],"1,":[111],"variable":[114],"n-grams":[115],"learning":[118],"native":[124],"API":[125],"call":[126],"sequences":[127],"(dynamic":[128],"2.":[132],"combined":[134],"not":[140],"only":[141,192],"accelerated":[142],"process":[146],"by":[147,165,193,201],"taking":[148],"advantage":[149],"CNN":[152],"image":[154],"recognition":[155],"also":[157],"appeared":[158],"be":[160,190],"more":[161],"resilient":[162],"analysis.":[168,217,252],"Different":[169],"from":[170,225],"other":[171],"techniques,":[176],"when":[177],"is":[179],"detected,":[180],"due":[181],"fact":[184],"that":[185,207,232],"most":[188],"likely":[189],"labeled":[191],"analysis,":[195],"could":[197],"reduce":[198],"overheads":[200],"dynamically":[202],"analyzing":[203],"few":[205],"has":[208],"less":[209],"obvious":[210],"features":[211],"or":[212],"greater":[213],"confusion":[214],"We":[218],"performed":[219],"experiments":[220],"174607":[222],"samples":[224],"63":[226],"families.":[228],"result":[230],"showed":[231],"achieved":[234],"98.82%":[235],"accuracy":[236],"classification.":[239],"Furthermore,":[240],"was":[242],"compared":[243],"method":[246],"preprocessing":[254],"test":[256],"time":[257],"represented":[258],"reduction":[260],"59.58%":[262],"61.70%,":[264],"respectively.":[265]},"counts_by_year":[{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":7}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}