{"id":"https://openalex.org/W4387029071","doi":"https://doi.org/10.1109/access.2023.3319093","title":"A Malware Detection Approach Based on Feature Engineering and Behavior Analysis","display_name":"A Malware Detection Approach Based on Feature Engineering and Behavior Analysis","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4387029071","doi":"https://doi.org/10.1109/access.2023.3319093"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3319093","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3319093","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10262299.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10262299.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072451690","display_name":"Manuel Torres","orcid":"https://orcid.org/0009-0005-4030-6308"},"institutions":[{"id":"https://openalex.org/I130194489","display_name":"University of Alicante","ror":"https://ror.org/05t8bcz72","country_code":"ES","type":"education","lineage":["https://openalex.org/I130194489"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Manuel Torres","raw_affiliation_strings":["Department of Computer Science and AI, University of Alicante, Alicante, Spain"],"raw_orcid":"https://orcid.org/0009-0005-4030-6308","affiliations":[{"raw_affiliation_string":"Department of Computer Science and AI, University of Alicante, Alicante, Spain","institution_ids":["https://openalex.org/I130194489"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061454674","display_name":"Rafael \u00c1lvarez","orcid":"https://orcid.org/0000-0002-8254-6255"},"institutions":[{"id":"https://openalex.org/I130194489","display_name":"University of Alicante","ror":"https://ror.org/05t8bcz72","country_code":"ES","type":"education","lineage":["https://openalex.org/I130194489"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Rafael \u00c1lvarez","raw_affiliation_strings":["Department of Computer Science and AI, University of Alicante, Alicante, Spain"],"raw_orcid":"https://orcid.org/0000-0002-8254-6255","affiliations":[{"raw_affiliation_string":"Department of Computer Science and AI, University of Alicante, Alicante, Spain","institution_ids":["https://openalex.org/I130194489"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004213842","display_name":"Miguel Cazorla","orcid":"https://orcid.org/0000-0001-6805-3633"},"institutions":[{"id":"https://openalex.org/I130194489","display_name":"University of Alicante","ror":"https://ror.org/05t8bcz72","country_code":"ES","type":"education","lineage":["https://openalex.org/I130194489"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Miguel Cazorla","raw_affiliation_strings":["Department of Computer Science and AI, University of Alicante, Alicante, Spain"],"raw_orcid":"https://orcid.org/0000-0001-6805-3633","affiliations":[{"raw_affiliation_string":"Department of Computer Science and AI, University of Alicante, Alicante, Spain","institution_ids":["https://openalex.org/I130194489"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130194489"],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":2.3539,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.89337661,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"11","issue":null,"first_page":"105355","last_page":"105367"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8252007961273193},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7687970995903015},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.6024489998817444},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5712569952011108},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.5513826608657837},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39660322666168213},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38861215114593506},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.33124205470085144},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29711732268333435}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8252007961273193},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7687970995903015},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.6024489998817444},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5712569952011108},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.5513826608657837},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39660322666168213},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38861215114593506},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.33124205470085144},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29711732268333435},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3319093","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3319093","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10262299.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:rua.ua.es:10045/137642","is_oa":true,"landing_page_url":"http://hdl.handle.net/10045/137642","pdf_url":"http://rua.ua.es/dspace/bitstream/10045/137642/3/Torres_etal_2023_IEEEAccess.pdf","source":{"id":"https://openalex.org/S4306400975","display_name":"RUA, Repositorio Institucional de la Universidad de Alicante (Universidad de Alicante)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I130194489","host_organization_name":"University of Alicante","host_organization_lineage":["https://openalex.org/I130194489"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:02249920ae0f46e991e4587cd6ee4acf","is_oa":true,"landing_page_url":"https://doaj.org/article/02249920ae0f46e991e4587cd6ee4acf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 105355-105367 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3319093","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3319093","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10262299.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6800000071525574}],"awards":[{"id":"https://openalex.org/G7695946218","display_name":null,"funder_award_id":"2021/017","funder_id":"https://openalex.org/F4320321864","funder_display_name":"Generalitat Valenciana"}],"funders":[{"id":"https://openalex.org/F4320321864","display_name":"Generalitat Valenciana","ror":"https://ror.org/0097mvx21"},{"id":"https://openalex.org/F4320338357","display_name":"FP7 Science in Society","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387029071.pdf","grobid_xml":"https://content.openalex.org/works/W4387029071.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1629811776","https://openalex.org/W1806610636","https://openalex.org/W2041130390","https://openalex.org/W2121032650","https://openalex.org/W2158698691","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2333796428","https://openalex.org/W2606697812","https://openalex.org/W2625570400","https://openalex.org/W2950005521","https://openalex.org/W2963379686","https://openalex.org/W2964051315","https://openalex.org/W2998010923","https://openalex.org/W3047132966","https://openalex.org/W3080622597","https://openalex.org/W3112173953","https://openalex.org/W3125564951","https://openalex.org/W3162825625","https://openalex.org/W4304208831","https://openalex.org/W6678472248","https://openalex.org/W6703049675"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2134874482","https://openalex.org/W2768892939","https://openalex.org/W3164408430","https://openalex.org/W4285507391","https://openalex.org/W2397240470","https://openalex.org/W2602767565","https://openalex.org/W170652726","https://openalex.org/W2883822334"],"abstract_inverted_index":{"Cybercriminals":[0],"are":[1],"constantly":[2],"developing":[3],"new":[4,173],"techniques":[5,78],"to":[6,20,92,99,110,128],"circumvent":[7],"the":[8,129,169,186,206],"security":[9],"measures":[10],"implemented":[11],"by":[12,55,152],"experts":[13],"and":[14,63,89,96,167,214,235],"researchers,":[15],"so":[16],"malware":[17,27,49,137,150],"is":[18,31,109,229],"able":[19],"evolve":[21],"very":[22],"rapidly.":[23],"In":[24,217],"addition,":[25],"detecting":[26],"across":[28,79],"multiple":[29],"systems":[30],"a":[32,80,112,117,132,172,225,237],"challenging":[33],"problem":[34],"because":[35],"each":[36],"computing":[37],"environment":[38],"has":[39,236],"its":[40,192],"own":[41],"unique":[42],"characteristics.":[43],"Traditional":[44],"techniques,":[45],"such":[46,59],"as":[47,60,69,191],"signature-based":[48],"detection,":[50,68],"have":[51,71,201],"been":[52],"largely":[53],"replaced":[54],"more":[56],"modern":[57],"approaches,":[58],"machine":[61,174],"learning":[62,175],"robust":[64],"cross-platform":[65],"behavior-based":[66],"threat":[67],"they":[70],"become":[72],"less":[73],"effective.":[74],"Researchers":[75],"employ":[76],"these":[77],"variety":[81],"of":[82,106,116,120,131,171,219],"data":[83,193],"sources,":[84],"including":[85],"network":[86],"traffic,":[87],"binaries,":[88],"behavioral":[90],"data,":[91],"extract":[93],"relevant":[94],"features":[95],"feed":[97],"them":[98],"models":[100],"for":[101,136,148],"accurate":[102],"prediction.":[103],"The":[104],"aim":[105],"this":[107],"research":[108],"provide":[111],"novel":[113,189,212],"dataset":[114,190,213],"comprised":[115],"substantial":[118],"number":[119],"high-quality":[121],"samples":[122],"based":[123,177,231],"on":[124,161,178,232],"software":[125],"behavior.":[126],"Due":[127],"lack":[130],"standard":[133],"representational":[134],"format":[135],"behavior":[138,151,233],"in":[139],"current":[140],"research,":[141],"we":[142,165],"also":[143,230],"present":[144],"an":[145,197],"innovative":[146],"method":[147],"representing":[149],"converting":[153],"API":[154],"calls":[155],"into":[156],"2D":[157],"images,":[158],"which":[159],"builds":[160],"previous":[162],"work.":[163],"Additionally,":[164],"propose":[166],"describe":[168],"implementation":[170],"model":[176,208,223,227],"binary":[179],"classification":[180],"(malware":[181],"or":[182],"benign":[183],"software)":[184],"using":[185],"previously":[187],"mentioned":[188],"source,":[194],"thereby":[195],"establishing":[196],"evaluation":[198],"baseline.":[199],"We":[200],"conducted":[202],"extensive":[203],"experimentation,":[204],"validating":[205],"proposed":[207,222],"with":[209],"both":[210],"our":[211,221],"real-world":[215],"data.":[216],"terms":[218],"metrics,":[220],"outperforms":[224],"well-known":[226],"that":[228],"analysis":[234],"similar":[238],"architecture.":[239]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":3}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}