{"id":"https://openalex.org/W4390423677","doi":"https://doi.org/10.1109/access.2023.3348451","title":"Addressing Behavioral Drift in Ransomware Early Detection Through Weighted Generative Adversarial Networks","display_name":"Addressing Behavioral Drift in Ransomware Early Detection Through Weighted Generative Adversarial Networks","publication_year":2023,"publication_date":"2023-12-29","ids":{"openalex":"https://openalex.org/W4390423677","doi":"https://doi.org/10.1109/access.2023.3348451"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3348451","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3348451","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10376176.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10376176.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039334205","display_name":"Umara Urooj","orcid":"https://orcid.org/0009-0009-1307-6040"},"institutions":[{"id":"https://openalex.org/I4576418","display_name":"University of Technology Malaysia","ror":"https://ror.org/026w31v75","country_code":"MY","type":"education","lineage":["https://openalex.org/I4576418"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Umara Urooj","raw_affiliation_strings":["Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Johor Bahru, Johor, Malaysia"],"raw_orcid":"https://orcid.org/0009-0009-1307-6040","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Johor Bahru, Johor, Malaysia","institution_ids":["https://openalex.org/I4576418"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013398556","display_name":"Bander Ali Saleh Al\u2010rimy","orcid":"https://orcid.org/0000-0003-3048-5961"},"institutions":[{"id":"https://openalex.org/I4576418","display_name":"University of Technology Malaysia","ror":"https://ror.org/026w31v75","country_code":"MY","type":"education","lineage":["https://openalex.org/I4576418"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Bander Ali Saleh Al-Rimy","raw_affiliation_strings":["Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Johor Bahru, Johor, Malaysia"],"raw_orcid":"https://orcid.org/0000-0003-3048-5961","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Johor Bahru, Johor, Malaysia","institution_ids":["https://openalex.org/I4576418"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062591167","display_name":"Anazida Zainal","orcid":"https://orcid.org/0000-0003-0022-3039"},"institutions":[{"id":"https://openalex.org/I4576418","display_name":"University of Technology Malaysia","ror":"https://ror.org/026w31v75","country_code":"MY","type":"education","lineage":["https://openalex.org/I4576418"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Anazida Binti Zainal","raw_affiliation_strings":["Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Johor Bahru, Johor, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Johor Bahru, Johor, Malaysia","institution_ids":["https://openalex.org/I4576418"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018312503","display_name":"Faisal Saeed","orcid":"https://orcid.org/0000-0002-2822-1708"},"institutions":[{"id":"https://openalex.org/I12870472","display_name":"Birmingham City University","ror":"https://ror.org/00t67pt25","country_code":"GB","type":"education","lineage":["https://openalex.org/I12870472"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Faisal Saeed","raw_affiliation_strings":["DAAI Research Group, School of Computing and Digital Technology, College of Computing and Digital Technology, Birmingham City University, Birmingham, U.K"],"raw_orcid":"https://orcid.org/0000-0002-2822-1708","affiliations":[{"raw_affiliation_string":"DAAI Research Group, School of Computing and Digital Technology, College of Computing and Digital Technology, Birmingham City University, Birmingham, U.K","institution_ids":["https://openalex.org/I12870472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089757453","display_name":"Abdelzahir Abdelmaboud","orcid":"https://orcid.org/0000-0001-7474-9100"},"institutions":[{"id":"https://openalex.org/I82952536","display_name":"King Khalid University","ror":"https://ror.org/052kwzs30","country_code":"SA","type":"education","lineage":["https://openalex.org/I82952536"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Abdelzahir Abdelmaboud","raw_affiliation_strings":["Department of Information Systems, King Khalid University, Muhayil, Saudi Arabia","Department of Information Systems, King Khalid University, Muhayel Aseer, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-7474-9100","affiliations":[{"raw_affiliation_string":"Department of Information Systems, King Khalid University, Muhayil, Saudi Arabia","institution_ids":["https://openalex.org/I82952536"]},{"raw_affiliation_string":"Department of Information Systems, King Khalid University, Muhayel Aseer, Saudi Arabia","institution_ids":["https://openalex.org/I82952536"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005065236","display_name":"Wamda Nagmeldin","orcid":"https://orcid.org/0000-0002-8382-3242"},"institutions":[{"id":"https://openalex.org/I142608572","display_name":"Prince Sattam Bin Abdulaziz University","ror":"https://ror.org/04jt46d36","country_code":"SA","type":"education","lineage":["https://openalex.org/I142608572"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Wamda Nagmeldin","raw_affiliation_strings":["Department of Information Systems, College of Computer Engineering and Sciences, Prince Sattam bin Abdulaziz University, Al-Kharj, Saudi Arabia","Department of information systems, College of Computer Engineering and Sciences, Prince Sattam bin Abdulaziz University, Al-Kharj, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, College of Computer Engineering and Sciences, Prince Sattam bin Abdulaziz University, Al-Kharj, Saudi Arabia","institution_ids":["https://openalex.org/I142608572"]},{"raw_affiliation_string":"Department of information systems, College of Computer Engineering and Sciences, Prince Sattam bin Abdulaziz University, Al-Kharj, Saudi Arabia","institution_ids":["https://openalex.org/I142608572"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":4.9747,"has_fulltext":true,"cited_by_count":27,"citation_normalized_percentile":{"value":0.96452891,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"12","issue":null,"first_page":"3910","last_page":"3925"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9817000031471252,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.909566342830658},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7571790814399719},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6518476009368896},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.5542131662368774},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4821474254131317},{"id":"https://openalex.org/keywords/behavioral-pattern","display_name":"Behavioral pattern","score":0.4761490821838379},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.44130969047546387},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41817498207092285},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41731297969818115},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.40549933910369873},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34614795446395874},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3414754867553711}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.909566342830658},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7571790814399719},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6518476009368896},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5542131662368774},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4821474254131317},{"id":"https://openalex.org/C83804111","wikidata":"https://www.wikidata.org/wiki/Q1063558","display_name":"Behavioral pattern","level":2,"score":0.4761490821838379},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.44130969047546387},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41817498207092285},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41731297969818115},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.40549933910369873},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34614795446395874},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3414754867553711},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3348451","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3348451","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10376176.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:www.open-access.bcu.ac.uk:15207","is_oa":true,"landing_page_url":null,"pdf_url":"https://www.open-access.bcu.ac.uk/15207/1/Addressing_Behavioral_Drift_in_Ransomware_Early_Detection_Through_Weighted_Generative_Adversarial_Networks.pdf","source":{"id":"https://openalex.org/S4306402654","display_name":"BCU Open Access Repository (Birmingham City University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I12870472","host_organization_name":"Birmingham City University","host_organization_lineage":["https://openalex.org/I12870472"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"pmh:oai:doaj.org/article:6a23a6ebd16b4de9bcf82969cd4c3104","is_oa":true,"landing_page_url":"https://doaj.org/article/6a23a6ebd16b4de9bcf82969cd4c3104","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 3910-3925 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3348451","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3348451","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10376176.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2186355850","display_name":null,"funder_award_id":"BS123456","funder_id":"https://openalex.org/F4320306111","funder_display_name":"U.S. Department of Commerce"},{"id":"https://openalex.org/G7166157512","display_name":null,"funder_award_id":"RGP.2/175/44","funder_id":"https://openalex.org/F4320324433","funder_display_name":"King Khalid University"}],"funders":[{"id":"https://openalex.org/F4320306111","display_name":"U.S. Department of Commerce","ror":"https://ror.org/04chq2495"},{"id":"https://openalex.org/F4320324433","display_name":"King Khalid University","ror":"https://ror.org/052kwzs30"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4390423677.pdf","grobid_xml":"https://content.openalex.org/works/W4390423677.grobid-xml"},"referenced_works_count":56,"referenced_works":["https://openalex.org/W1885191653","https://openalex.org/W2156504490","https://openalex.org/W2493960021","https://openalex.org/W2513529237","https://openalex.org/W2621187857","https://openalex.org/W2762151798","https://openalex.org/W2767092890","https://openalex.org/W2784113120","https://openalex.org/W2789758093","https://openalex.org/W2889321817","https://openalex.org/W2890196927","https://openalex.org/W2890528701","https://openalex.org/W2893176864","https://openalex.org/W2910470804","https://openalex.org/W2911311548","https://openalex.org/W2918753059","https://openalex.org/W2938164997","https://openalex.org/W2954539634","https://openalex.org/W2962117360","https://openalex.org/W2988809393","https://openalex.org/W2995213179","https://openalex.org/W3003433587","https://openalex.org/W3008920885","https://openalex.org/W3010934630","https://openalex.org/W3011230163","https://openalex.org/W3017051667","https://openalex.org/W3034402928","https://openalex.org/W3039822732","https://openalex.org/W3040422908","https://openalex.org/W3046149163","https://openalex.org/W3085263333","https://openalex.org/W3086410687","https://openalex.org/W3094219804","https://openalex.org/W3107251728","https://openalex.org/W3115696055","https://openalex.org/W3130036194","https://openalex.org/W3156454600","https://openalex.org/W3167818199","https://openalex.org/W3196515948","https://openalex.org/W3198025769","https://openalex.org/W4200208413","https://openalex.org/W4200569302","https://openalex.org/W4214744072","https://openalex.org/W4220737740","https://openalex.org/W4248806346","https://openalex.org/W4289236186","https://openalex.org/W4294470244","https://openalex.org/W4318189316","https://openalex.org/W4318337972","https://openalex.org/W4318348981","https://openalex.org/W4320342363","https://openalex.org/W6682686508","https://openalex.org/W6775416416","https://openalex.org/W6786500554","https://openalex.org/W6849231053","https://openalex.org/W6849826978"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2783112941","https://openalex.org/W2526398307","https://openalex.org/W2470029541","https://openalex.org/W4387065217","https://openalex.org/W4368275542","https://openalex.org/W2470502009","https://openalex.org/W2018524056","https://openalex.org/W2984871466","https://openalex.org/W4285783667"],"abstract_inverted_index":{"Crypto-ransomware":[0],"attacks":[1],"pose":[2],"a":[3,117],"significant":[4],"cyber":[5],"threat":[6],"due":[7],"to":[8,15,18,39,84,100,130,153,167,190],"the":[9,19,22,34,43,68,72,86,89,125,136,142,145,148,155,164,169,180,191],"irreversible":[10],"effect":[11],"of":[12,36,71,138,144,157],"encryption":[13],"employed":[14],"deny":[16],"access":[17],"data":[20,38,65,133],"on":[21,31],"victim\u2019s":[23],"device.":[24],"Existing":[25],"state-of-the-art":[26,192],"solutions":[27],"are":[28,75],"developed":[29],"based":[30],"two":[32,113],"assumptions:":[33],"availability":[35],"sufficient":[37,81],"perform":[40],"detection":[41,165],"during":[42,67],"pre-encryption":[44,69],"phase,":[45],"and":[46,52,77,94,140,199],"that":[47,103,134,179],"ransomware":[48,73,98,139,174],"behavior":[49,137],"is":[50,183],"static":[51],"does":[53,78],"not":[54,62,79],"change":[55],"over":[56],"time.":[57],"However,":[58],"such":[59],"assumptions":[60],"do":[61],"hold":[63],"as":[64],"collected":[66],"phase":[70],"attack":[74],"limited":[76],"contain":[80],"patterns":[82],"needed":[83],"identify":[85],"attack.":[87],"Additionally,":[88],"evasion":[90],"techniques":[91],"like":[92],"polymorphism":[93],"metamorphism":[95],"used":[96,129,152],"by":[97,115],"lead":[99],"behavioral":[101,170,187],"drift":[102,171,188],"could":[104],"defeat":[105],"those":[106],"solutions.":[107,193],"Therefore,":[108],"this":[109],"paper":[110],"addresses":[111],"these":[112],"issues":[114],"proposing":[116],"weighted":[118],"Generative":[119],"Adversarial":[120],"Networks":[121],"(wGANs)":[122],"technique.":[123],"Firstly,":[124],"proposed":[126,181],"wGAN":[127,182,195],"was":[128,151],"generate":[131],"synthetic":[132],"imitate":[135],"simulate":[141],"evolution":[143],"attacks.":[146],"Then,":[147],"mutual":[149],"information":[150],"estimate":[154],"significance":[156],"features":[158],"for":[159],"different":[160],"timeframes,":[161],"thereby":[162],"helping":[163],"model":[166],"handle":[168],"in":[172],"emerging":[173],"variants.":[175],"Experimental":[176],"evaluation":[177],"demonstrates":[178],"more":[184],"robust":[185],"against":[186],"compared":[189],"The":[194],"achieved":[196],"higher":[197],"accuracy":[198],"lower":[200],"false":[201],"alarm":[202],"rates.":[203]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":7}],"updated_date":"2026-06-14T07:44:22.658603","created_date":"2025-10-10T00:00:00"}