{"id":"https://openalex.org/W3174621618","doi":"https://doi.org/10.1109/access.2021.3091427","title":"A Survey on Cross-Architectural IoT Malware Threat Hunting","display_name":"A Survey on Cross-Architectural IoT Malware Threat Hunting","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3174621618","doi":"https://doi.org/10.1109/access.2021.3091427","mag":"3174621618"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3091427","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3091427","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09462110.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09462110.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022932578","display_name":"Anandharaju Durai Raju","orcid":"https://orcid.org/0000-0001-9873-5870"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Anandharaju Durai Raju","raw_affiliation_strings":["School of Computing Science, Simon Fraser University, Burnaby, BC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9873-5870","affiliations":[{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, Burnaby, BC, Canada","institution_ids":["https://openalex.org/I18014758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028941501","display_name":"Ibrahim Abualhaol","orcid":"https://orcid.org/0000-0001-8359-4470"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ibrahim Y. Abualhaol","raw_affiliation_strings":["Huawei Technologies Canada Company Ltd., Kanata, ON, Canada"],"raw_orcid":"https://orcid.org/0000-0001-8359-4470","affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Company Ltd., Kanata, ON, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056993180","display_name":"Ronnie Salvador Giagone","orcid":"https://orcid.org/0000-0002-7877-9531"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ronnie Salvador Giagone","raw_affiliation_strings":["Huawei Technologies Canada Company Ltd., Burnaby, BC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-7877-9531","affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Company Ltd., Burnaby, BC, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030808791","display_name":"Yang Zhou","orcid":"https://orcid.org/0000-0001-9057-6713"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yang Zhou","raw_affiliation_strings":["Huawei Technologies Canada Company Ltd., Markham, ON, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9057-6713","affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Company Ltd., Markham, ON, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054235059","display_name":"Shengqiang Huang","orcid":"https://orcid.org/0000-0001-9137-0178"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Shengqiang Huang","raw_affiliation_strings":["Huawei Technologies Canada Company Ltd., Burnaby, BC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9137-0178","affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Company Ltd., Burnaby, BC, Canada","institution_ids":["https://openalex.org/I4210115038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.8389,"has_fulltext":true,"cited_by_count":50,"citation_normalized_percentile":{"value":0.97129353,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"9","issue":null,"first_page":"91686","last_page":"91709"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9847999811172485,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8782527446746826},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7546885013580322},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.6277493238449097},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5674986839294434},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5409489870071411},{"id":"https://openalex.org/keywords/unix","display_name":"Unix","score":0.44105270504951477},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.42940881848335266},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3792802691459656},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1800253987312317},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.07852283120155334}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8782527446746826},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7546885013580322},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.6277493238449097},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5674986839294434},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5409489870071411},{"id":"https://openalex.org/C112968700","wikidata":"https://www.wikidata.org/wiki/Q11368","display_name":"Unix","level":3,"score":0.44105270504951477},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.42940881848335266},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3792802691459656},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1800253987312317},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.07852283120155334}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2021.3091427","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3091427","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09462110.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2306.07989","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2306.07989","pdf_url":"https://arxiv.org/pdf/2306.07989","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:doaj.org/article:56bce3a07d054e29a70529aff5c067e5","is_oa":true,"landing_page_url":"https://doaj.org/article/56bce3a07d054e29a70529aff5c067e5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 91686-91709 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3091427","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3091427","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09462110.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5199999809265137}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3174621618.pdf","grobid_xml":"https://content.openalex.org/works/W3174621618.grobid-xml"},"referenced_works_count":96,"referenced_works":["https://openalex.org/W58852127","https://openalex.org/W152196245","https://openalex.org/W200681053","https://openalex.org/W1558357780","https://openalex.org/W1669806660","https://openalex.org/W1973403081","https://openalex.org/W1987684126","https://openalex.org/W1996975221","https://openalex.org/W2009033060","https://openalex.org/W2010065958","https://openalex.org/W2021264330","https://openalex.org/W2044465660","https://openalex.org/W2056107175","https://openalex.org/W2057787526","https://openalex.org/W2063898900","https://openalex.org/W2121153597","https://openalex.org/W2142772656","https://openalex.org/W2166128942","https://openalex.org/W2216444195","https://openalex.org/W2324760271","https://openalex.org/W2397211345","https://openalex.org/W2482374127","https://openalex.org/W2514331801","https://openalex.org/W2577361581","https://openalex.org/W2617916473","https://openalex.org/W2625806818","https://openalex.org/W2732916693","https://openalex.org/W2734719707","https://openalex.org/W2748832281","https://openalex.org/W2748868501","https://openalex.org/W2781049225","https://openalex.org/W2781611023","https://openalex.org/W2784097977","https://openalex.org/W2791879367","https://openalex.org/W2792450155","https://openalex.org/W2794801050","https://openalex.org/W2798159728","https://openalex.org/W2887921593","https://openalex.org/W2889717770","https://openalex.org/W2896805421","https://openalex.org/W2900633536","https://openalex.org/W2902209387","https://openalex.org/W2903652620","https://openalex.org/W2913493033","https://openalex.org/W2914373984","https://openalex.org/W2924196523","https://openalex.org/W2941650181","https://openalex.org/W2946404812","https://openalex.org/W2948997384","https://openalex.org/W2961099251","https://openalex.org/W2962802821","https://openalex.org/W2963106521","https://openalex.org/W2979795649","https://openalex.org/W2981856772","https://openalex.org/W2986458967","https://openalex.org/W2994804501","https://openalex.org/W2994944553","https://openalex.org/W2996806689","https://openalex.org/W2998074434","https://openalex.org/W3016048014","https://openalex.org/W3017821103","https://openalex.org/W3024340288","https://openalex.org/W3025424853","https://openalex.org/W3029946226","https://openalex.org/W3048726132","https://openalex.org/W3093692271","https://openalex.org/W3095718454","https://openalex.org/W3100399179","https://openalex.org/W3111237076","https://openalex.org/W3113371616","https://openalex.org/W3114468998","https://openalex.org/W3115585259","https://openalex.org/W3127478377","https://openalex.org/W3129054247","https://openalex.org/W3131954256","https://openalex.org/W3134862757","https://openalex.org/W3141567114","https://openalex.org/W3154485088","https://openalex.org/W3157039573","https://openalex.org/W3178593045","https://openalex.org/W4297747285","https://openalex.org/W4300687693","https://openalex.org/W6602413418","https://openalex.org/W6606250027","https://openalex.org/W6608206699","https://openalex.org/W6637397297","https://openalex.org/W6688716199","https://openalex.org/W6732060406","https://openalex.org/W6743493502","https://openalex.org/W6745899033","https://openalex.org/W6750318962","https://openalex.org/W6786854854","https://openalex.org/W6787829554","https://openalex.org/W6790450315","https://openalex.org/W6790828042","https://openalex.org/W6791301604"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2134874482","https://openalex.org/W2768892939","https://openalex.org/W3164408430","https://openalex.org/W4285507391","https://openalex.org/W2397240470","https://openalex.org/W2602767565","https://openalex.org/W170652726","https://openalex.org/W2883822334"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"the":[3,11,14,27,38,41,94,112,124,133],"increase":[4],"in":[5,97,123,137],"non-Windows":[6],"malware":[7,31,100,140],"threats":[8],"had":[9],"turned":[10],"focus":[12],"of":[13,40,43],"cybersecurity":[15],"community.":[16],"Research":[17],"works":[18],"on":[19,29,93,132],"hunting":[20,33,142],"Windows":[21],"PE-based":[22],"malwares":[23],"are":[24,34,50],"maturing,":[25],"whereas":[26],"developments":[28,96],"Linux":[30],"threat":[32,141],"relatively":[35],"scarce.":[36],"With":[37],"advent":[39],"Internet":[42],"Things":[44],"(IoT)":[45],"era,":[46],"smart":[47],"devices":[48,67],"that":[49,72],"getting":[51],"integrated":[52],"into":[53],"human":[54],"life":[55],"have":[56],"become":[57],"a":[58,90,107],"hackers'":[59],"highway":[60],"for":[61],"their":[62,80],"malicious":[63],"activities.":[64],"The":[65],"IoT":[66,99,139],"employ":[68],"various":[69,145],"Unix-based":[70],"architectures":[71],"follow":[73],"ELF":[74],"(Executable":[75],"and":[76,102,118,143],"Linkable":[77],"Format)":[78],"as":[79],"standard":[81],"binary":[82],"file":[83],"specification.":[84],"This":[85],"study":[86],"aims":[87],"at":[88],"providing":[89],"comprehensive":[91],"survey":[92],"latest":[95],"cross-architectural":[98,138],"detection":[101],"classification":[103],"approaches.":[104],"Aided":[105],"by":[106],"modern":[108],"taxonomy,":[109],"we":[110],"discuss":[111,144],"feature":[113,115],"representations,":[114],"extraction":[116],"techniques,":[117],"machine":[119],"learning":[120],"models":[121],"employed":[122],"surveyed":[125],"works.":[126],"We":[127],"further":[128],"provide":[129],"more":[130],"insights":[131],"practical":[134],"challenges":[135],"involved":[136],"avenues":[146],"to":[147],"instill":[148],"potential":[149],"future":[150],"research.":[151]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}