{"id":"https://openalex.org/W4388820046","doi":"https://doi.org/10.1109/access.2023.3335187","title":"Toward Hardware-Assisted Malware Detection Utilizing Explainable Machine Learning: A Survey","display_name":"Toward Hardware-Assisted Malware Detection Utilizing Explainable Machine Learning: A Survey","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4388820046","doi":"https://doi.org/10.1109/access.2023.3335187"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3335187","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3335187","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10323406.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10323406.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026898776","display_name":"Yehya Nasser","orcid":"https://orcid.org/0000-0001-8176-8510"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]},{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yehya Nasser","raw_affiliation_strings":["Lab-STICC, UMR CNRS 6285, IMT Atlantique School, Brest, France"],"raw_orcid":"https://orcid.org/0000-0001-8176-8510","affiliations":[{"raw_affiliation_string":"Lab-STICC, UMR CNRS 6285, IMT Atlantique School, Brest, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I161929037","https://openalex.org/I4210123702","https://openalex.org/I4210127572"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043344581","display_name":"Mohamed Nassar","orcid":"https://orcid.org/0000-0001-8857-4436"},"institutions":[{"id":"https://openalex.org/I82495205","display_name":"University of Alabama in Huntsville","ror":"https://ror.org/02zsxwr40","country_code":"US","type":"education","lineage":["https://openalex.org/I82495205"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohamad Nassar","raw_affiliation_strings":["Department of Computer Science, The University of Alabama in Huntsville, Huntsville, AL, USA"],"raw_orcid":"https://orcid.org/0000-0001-8857-4436","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Alabama in Huntsville, Huntsville, AL, USA","institution_ids":["https://openalex.org/I82495205"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"EUR","value_usd":1995},"fwci":0.5345,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.62198721,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"11","issue":null,"first_page":"131273","last_page":"131288"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8714314103126526},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8426985144615173},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5497239232063293},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5485884547233582},{"id":"https://openalex.org/keywords/instruction-set","display_name":"Instruction set","score":0.5381603240966797},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5180209279060364},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.501234769821167},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3987267315387726},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32737070322036743},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.31316477060317993}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8714314103126526},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8426985144615173},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5497239232063293},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5485884547233582},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.5381603240966797},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5180209279060364},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.501234769821167},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3987267315387726},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32737070322036743},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.31316477060317993},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3335187","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3335187","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10323406.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-04589033v1","is_oa":true,"landing_page_url":"https://imt-atlantique.hal.science/hal-04589033","pdf_url":"https://imt-atlantique.hal.science/hal-04589033/document","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, 2023, 11, pp.131273 - 131288. ⟨10.1109/access.2023.3335187⟩","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:33dd66da4be54d4f817d75e644c39190","is_oa":true,"landing_page_url":"https://doaj.org/article/33dd66da4be54d4f817d75e644c39190","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 131273-131288 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3335187","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3335187","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10323406.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320327215","display_name":"R\u00e9gion Bretagne","ror":null},{"id":"https://openalex.org/F4320335086","display_name":"Direction G\u00e9n\u00e9rale de l\u2019Armement","ror":"https://ror.org/04wsqd844"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388820046.pdf","grobid_xml":"https://content.openalex.org/works/W4388820046.grobid-xml"},"referenced_works_count":58,"referenced_works":["https://openalex.org/W1518563014","https://openalex.org/W1977103239","https://openalex.org/W2001292291","https://openalex.org/W2010350305","https://openalex.org/W2034053858","https://openalex.org/W2034938003","https://openalex.org/W2057801703","https://openalex.org/W2088503757","https://openalex.org/W2097892280","https://openalex.org/W2108700604","https://openalex.org/W2142993476","https://openalex.org/W2157951313","https://openalex.org/W2344380211","https://openalex.org/W2516809705","https://openalex.org/W2532262706","https://openalex.org/W2540100037","https://openalex.org/W2694767641","https://openalex.org/W2788403449","https://openalex.org/W2798446790","https://openalex.org/W2890478469","https://openalex.org/W2890991187","https://openalex.org/W2932551155","https://openalex.org/W2950774332","https://openalex.org/W2962911061","https://openalex.org/W2969770678","https://openalex.org/W2969910530","https://openalex.org/W2974865449","https://openalex.org/W2982631433","https://openalex.org/W2996806689","https://openalex.org/W2998074434","https://openalex.org/W3007346474","https://openalex.org/W3020975691","https://openalex.org/W3022115947","https://openalex.org/W3036681545","https://openalex.org/W3039088822","https://openalex.org/W3040943618","https://openalex.org/W3088273379","https://openalex.org/W3091621850","https://openalex.org/W3096942073","https://openalex.org/W3116877279","https://openalex.org/W3155543450","https://openalex.org/W3160933150","https://openalex.org/W3181455672","https://openalex.org/W3185872651","https://openalex.org/W4200518437","https://openalex.org/W4224286995","https://openalex.org/W4253180115","https://openalex.org/W4285205927","https://openalex.org/W4288638181","https://openalex.org/W4319993931","https://openalex.org/W4385486439","https://openalex.org/W4387432110","https://openalex.org/W6745899033","https://openalex.org/W6758125152","https://openalex.org/W6778883912","https://openalex.org/W6790770780","https://openalex.org/W6849580301","https://openalex.org/W6857588226"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1557094818","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W3152891574","https://openalex.org/W1975357770"],"abstract_inverted_index":{"Hardware":[0,17],"joined":[1],"the":[2,68,71,88,122],"battle":[3],"against":[4],"malware":[5,163,170],"by":[6,104],"introducing":[7],"secure":[8,78,132],"boot":[9,134],"architectures,":[10],"malware-aware":[11,81,157],"processors,":[12],"and":[13,22,37,55,80,93,114,166,175],"trusted":[14],"platform":[15],"modules.":[16],"performance":[18],"indicators,":[19],"power":[20],"profiles,":[21],"side":[23],"channel":[24],"information":[25],"can":[26,176],"be":[27,177],"leveraged":[28],"at":[29],"run-time":[30],"via":[31],"machine":[32,43,105],"learning":[33,44,106],"for":[34,107,162],"continuous":[35],"monitoring":[36],"protection.":[38],"The":[39],"explainability":[40,116],"of":[41,70,73,154],"these":[42,74],"algorithms":[45,117],"may":[46],"play":[47],"a":[48,136],"crucial":[49],"role":[50],"in":[51,87,118,152],"interpreting":[52],"their":[53],"results":[54],"avoiding":[56],"false":[57],"positives.":[58],"In":[59,121],"this":[60],"paper,":[61],"we":[62,76,124],"present":[63],"an":[64],"eagle":[65],"eye":[66],"on":[67],"state":[69],"art":[72],"components:":[75],"examine":[77],"architectures":[79,129],"processors":[82,158],"such":[83],"as":[84],"those":[85],"implemented":[86],"RISC-V":[89],"Instruction":[90,95],"Set":[91,96],"Architecture":[92],"Reduced":[94],"Computer":[97],"(RISC).":[98],"We":[99,109],"categorize":[100],"hardware-assisted":[101,115],"solutions":[102],"increased":[103],"classification.":[108],"survey":[110],"recently":[111],"proposed":[112],"software-assisted":[113],"our":[119],"context.":[120],"discussion,":[123],"suggest":[125],"that":[126,130],"(1)":[127],"safe":[128],"guarantee":[131],"device":[133],"are":[135,141],"must,":[137],"(2)":[138],"Side-channel":[139],"approaches":[140],"challenging":[142],"to":[143],"integrate":[144],"into":[145],"embedded":[146],"systems,":[147],"yet":[148],"they":[149],"show":[150],"promise":[151],"terms":[153],"efficiency,":[155],"(3)":[156],"provide":[159],"valuable":[160],"features":[161],"detection":[164,171],"software,":[165],"(4)":[167],"Without":[168],"explainability,":[169],"software":[172],"is":[173],"error-prone":[174],"easily":[178],"bypassed.":[179]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}