{"id":"https://openalex.org/W4391147981","doi":"https://doi.org/10.1109/access.2024.3357620","title":"PDF Malware Detection: Toward Machine Learning Modeling With Explainability Analysis","display_name":"PDF Malware Detection: Toward Machine Learning Modeling With Explainability Analysis","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391147981","doi":"https://doi.org/10.1109/access.2024.3357620"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3357620","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3357620","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10412055.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10412055.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063511782","display_name":"G.M. Sakhawat Hossain","orcid":"https://orcid.org/0000-0002-9632-0521"},"institutions":[{"id":"https://openalex.org/I102782458","display_name":"Chittagong University of Engineering & Technology","ror":"https://ror.org/052qsay17","country_code":"BD","type":"education","lineage":["https://openalex.org/I102782458"]},{"id":"https://openalex.org/I3129529705","display_name":"Rangamati Science and Technology University","ror":"https://ror.org/004hnyk37","country_code":"BD","type":"education","lineage":["https://openalex.org/I3129529705"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"G. M. Sakhawat Hossain","raw_affiliation_strings":["Department of Computer Science and Engineering, Chittagong University of Engineering and Technology, Chattogram, Bangladesh","Department of Computer Science and Engineering, Rangamati Science and Technology University, Chattogram, Bangladesh"],"raw_orcid":"https://orcid.org/0000-0002-9632-0521","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Chittagong University of Engineering and Technology, Chattogram, Bangladesh","institution_ids":["https://openalex.org/I102782458"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, Rangamati Science and Technology University, Chattogram, Bangladesh","institution_ids":["https://openalex.org/I3129529705"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086809571","display_name":"Kaushik Deb","orcid":"https://orcid.org/0000-0002-7345-0999"},"institutions":[{"id":"https://openalex.org/I102782458","display_name":"Chittagong University of Engineering & Technology","ror":"https://ror.org/052qsay17","country_code":"BD","type":"education","lineage":["https://openalex.org/I102782458"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Kaushik Deb","raw_affiliation_strings":["Department of Computer Science and Engineering, Chittagong University of Engineering and Technology, Chattogram, Bangladesh"],"raw_orcid":"https://orcid.org/0000-0002-7345-0999","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Chittagong University of Engineering and Technology, Chattogram, Bangladesh","institution_ids":["https://openalex.org/I102782458"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035745103","display_name":"Helge Janicke","orcid":"https://orcid.org/0000-0002-1345-2829"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Helge Janicke","raw_affiliation_strings":["Cyber Security Cooperative Research Centre, Joondalup, WA, Australia","School of Science, Security Research Institute, Edith Cowan University, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1345-2829","affiliations":[{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Joondalup, WA, Australia","institution_ids":[]},{"raw_affiliation_string":"School of Science, Security Research Institute, Edith Cowan University, Perth, WA, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055312229","display_name":"Iqbal H. Sarker","orcid":"https://orcid.org/0000-0003-1740-5517"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Iqbal H. Sarker","raw_affiliation_strings":["Cyber Security Cooperative Research Centre, Joondalup, WA, Australia","School of Science, Security Research Institute, Edith Cowan University, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1740-5517","affiliations":[{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Joondalup, WA, Australia","institution_ids":[]},{"raw_affiliation_string":"School of Science, Security Research Institute, Edith Cowan University, Perth, WA, Australia","institution_ids":["https://openalex.org/I12079687"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.6601,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.9358875,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"12","issue":null,"first_page":"13833","last_page":"13859"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8263286352157593},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7510079145431519},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4529716372489929},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4343026876449585},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29884016513824463}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8263286352157593},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7510079145431519},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4529716372489929},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4343026876449585},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29884016513824463}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2024.3357620","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3357620","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10412055.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:ro.ecu.edu.au:ecuworks2022-2026-4762","is_oa":true,"landing_page_url":"https://ro.ecu.edu.au/ecuworks2022-2026/3761","pdf_url":null,"source":{"id":"https://openalex.org/S2765015692","display_name":"Australasian Journal of Paramedicine","issn_l":"2202-7270","issn":["2202-7270"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research outputs 2022 to 2026","raw_type":"text"},{"id":"pmh:oai:doaj.org/article:c5302ad248bb428d91cc553eafb53eaf","is_oa":true,"landing_page_url":"https://doaj.org/article/c5302ad248bb428d91cc553eafb53eaf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 13833-13859 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3357620","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3357620","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10412055.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.75}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320988","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4391147981.pdf","grobid_xml":"https://content.openalex.org/works/W4391147981.grobid-xml"},"referenced_works_count":45,"referenced_works":["https://openalex.org/W200681053","https://openalex.org/W1519407765","https://openalex.org/W1570448133","https://openalex.org/W1807659533","https://openalex.org/W1972531058","https://openalex.org/W1988146703","https://openalex.org/W1991603936","https://openalex.org/W1993651556","https://openalex.org/W2001473217","https://openalex.org/W2014466911","https://openalex.org/W2038296020","https://openalex.org/W2063586034","https://openalex.org/W2081293472","https://openalex.org/W2082190528","https://openalex.org/W2275155238","https://openalex.org/W2312936843","https://openalex.org/W2401293755","https://openalex.org/W2486441280","https://openalex.org/W2525598640","https://openalex.org/W2573650634","https://openalex.org/W2755537837","https://openalex.org/W2922344003","https://openalex.org/W2942071622","https://openalex.org/W2963896559","https://openalex.org/W2973442392","https://openalex.org/W2984061032","https://openalex.org/W2984933631","https://openalex.org/W3006292440","https://openalex.org/W3043451768","https://openalex.org/W3088861647","https://openalex.org/W3111750027","https://openalex.org/W3126142955","https://openalex.org/W3164408430","https://openalex.org/W3175487048","https://openalex.org/W3198411072","https://openalex.org/W4212780327","https://openalex.org/W4296710614","https://openalex.org/W4303627748","https://openalex.org/W6605763415","https://openalex.org/W6608206699","https://openalex.org/W6638287907","https://openalex.org/W6694723495","https://openalex.org/W6712851249","https://openalex.org/W6743476355","https://openalex.org/W6761377332"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"The":[0,56],"Portable":[1],"Document":[2],"Format":[3],"(PDF)":[4],"is":[5,62],"one":[6],"of":[7,43,59,85,98,120,131,133,164,182],"the":[8,72,77,92,99,117,160,165,186,191,198],"most":[9],"widely":[10],"used":[11],"file":[12],"types,":[13],"thus":[14],"fraudsters":[15],"insert":[16],"harmful":[17],"code":[18],"into":[19,90],"victims\u2019":[20],"PDF":[21,40,65,87,100,105,118,145],"documents":[22],"to":[23,63,70,140,151],"compromise":[24],"their":[25,44],"equipment.":[26],"Conventional":[27],"solutions":[28],"and":[29,35,47,95,110,155,167,177,220],"identification":[30],"techniques":[31],"are":[32],"often":[33],"insufficient":[34],"may":[36],"only":[37],"partially":[38],"prevent":[39],"malware":[41,66],"because":[42],"versatile":[45],"character":[46],"excessive":[48],"dependence":[49],"on":[50],"a":[51,82,129,149,203,215],"certain":[52],"typical":[53],"feature":[54,157,193],"set.":[55,194],"primary":[57],"goal":[58],"this":[60],"work":[61],"detect":[64],"efficiently":[67],"in":[68,143],"order":[69],"alleviate":[71],"current":[73],"difficulties.":[74],"To":[75],"accomplish":[76],"goal,":[78],"we":[79,112,127,196,213],"first":[80],"develop":[81,148],"comprehensive":[83],"dataset":[84],"15958":[86],"samples":[88,119],"taking":[89],"account":[91],"non-malevolent,":[93],"malicious,":[94],"evasive":[96],"behaviors":[97],"samples.":[101],"Using":[102],"three":[103],"well-known":[104],"analysis":[106,163],"tools":[107],"(PDFiD,":[108],"PDFINFO,":[109],"PDF-PARSER),":[111],"extract":[113],"significant":[114],"characteristics":[115],"from":[116],"our":[121],"newly":[122],"created":[123],"dataset.":[124],"In":[125],"addition,":[126],"generate":[128],"number":[130],"derivations":[132],"features":[134],"that":[135,206],"have":[136],"been":[137],"experimentally":[138],"proven":[139],"be":[141],"helpful":[142],"classifying":[144],"malware.":[146],"We":[147,170],"method":[150],"build":[152],"an":[153,179],"efficient":[154],"explicable":[156],"set":[158],"through":[159],"proper":[161],"empirical":[162],"extracted":[166],"derived":[168],"features.":[169],"explore":[171],"different":[172],"baseline":[173],"machine":[174],"learning":[175],"classifiers":[176],"demonstrate":[178,197],"accuracy":[180],"improvement":[181],"approx.":[183],"2%":[184],"for":[185,209],"Random":[187],"Forest":[188],"classifier":[189],"utilizing":[190],"selected":[192],"Furthermore,":[195],"model\u2019s":[199],"explainability":[200],"by":[201],"creating":[202],"decision":[204],"tree":[205],"generates":[207],"rules":[208],"human":[210],"interpretation.":[211],"Eventually,":[212],"make":[214],"comparison":[216],"with":[217],"previous":[218],"studies":[219],"point":[221],"out":[222],"some":[223],"important":[224],"findings.":[225]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}