{"id":"https://openalex.org/W4391248814","doi":"https://doi.org/10.1109/access.2024.3358840","title":"Obfuscated Privacy Malware Classifiers Based on Memory Dumping Analysis","display_name":"Obfuscated Privacy Malware Classifiers Based on Memory Dumping Analysis","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391248814","doi":"https://doi.org/10.1109/access.2024.3358840"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3358840","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3358840","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10414983.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10414983.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078041967","display_name":"David Cevallos-Salas","orcid":"https://orcid.org/0000-0002-3098-3090"},"institutions":[{"id":"https://openalex.org/I70764802","display_name":"National Polytechnic School","ror":"https://ror.org/01gb99w41","country_code":"EC","type":"education","lineage":["https://openalex.org/I70764802"]}],"countries":["EC"],"is_corresponding":false,"raw_author_name":"David Cevallos-Salas","raw_affiliation_strings":["Departamento de Electrónica, Telecomunicaciones y Redes de Información, Facultad de Ingeniería Eléctrica y Electrónica, Escuela Politécnica Nacional, Quito, Ecuador"],"raw_orcid":"https://orcid.org/0000-0002-3098-3090","affiliations":[{"raw_affiliation_string":"Departamento de Electrónica, Telecomunicaciones y Redes de Información, Facultad de Ingeniería Eléctrica y Electrónica, Escuela Politécnica Nacional, Quito, Ecuador","institution_ids":["https://openalex.org/I70764802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018868577","display_name":"Felipe Grijalva","orcid":"https://orcid.org/0000-0001-6162-3429"},"institutions":[{"id":"https://openalex.org/I69094615","display_name":"Universidad San Francisco de Quito","ror":"https://ror.org/01r2c3v86","country_code":"EC","type":"education","lineage":["https://openalex.org/I69094615"]}],"countries":["EC"],"is_corresponding":false,"raw_author_name":"Felipe Grijalva","raw_affiliation_strings":["Colegio de Ciencias e Ingenierías “El Politécnico,”, Universidad San Francisco de Quito (USFQ), Quito, Ecuador"],"raw_orcid":"https://orcid.org/0000-0001-6162-3429","affiliations":[{"raw_affiliation_string":"Colegio de Ciencias e Ingenierías “El Politécnico,”, Universidad San Francisco de Quito (USFQ), Quito, Ecuador","institution_ids":["https://openalex.org/I69094615"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101785151","display_name":"Jos\u00e9 Antonio Estrada","orcid":"https://orcid.org/0000-0002-9568-3224"},"institutions":[{"id":"https://openalex.org/I70764802","display_name":"National Polytechnic School","ror":"https://ror.org/01gb99w41","country_code":"EC","type":"education","lineage":["https://openalex.org/I70764802"]}],"countries":["EC"],"is_corresponding":false,"raw_author_name":"Jos\u00e9 Estrada-Jim\u00e9nez","raw_affiliation_strings":["Departamento de Electrónica, Telecomunicaciones y Redes de Información, Facultad de Ingeniería Eléctrica y Electrónica, Escuela Politécnica Nacional, Quito, Ecuador"],"raw_orcid":"https://orcid.org/0000-0002-9568-3224","affiliations":[{"raw_affiliation_string":"Departamento de Electrónica, Telecomunicaciones y Redes de Información, Facultad de Ingeniería Eléctrica y Electrónica, Escuela Politécnica Nacional, Quito, Ecuador","institution_ids":["https://openalex.org/I70764802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032417944","display_name":"Diego S. Ben\u00edtez","orcid":"https://orcid.org/0000-0001-6219-067X"},"institutions":[{"id":"https://openalex.org/I69094615","display_name":"Universidad San Francisco de Quito","ror":"https://ror.org/01r2c3v86","country_code":"EC","type":"education","lineage":["https://openalex.org/I69094615"]}],"countries":["EC"],"is_corresponding":false,"raw_author_name":"Diego Ben\u00edtez","raw_affiliation_strings":["Colegio de Ciencias e Ingenierías “El Politécnico,”, Universidad San Francisco de Quito (USFQ), Quito, Ecuador"],"raw_orcid":"https://orcid.org/0000-0001-6219-067X","affiliations":[{"raw_affiliation_string":"Colegio de Ciencias e Ingenierías “El Politécnico,”, Universidad San Francisco de Quito (USFQ), Quito, Ecuador","institution_ids":["https://openalex.org/I69094615"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085764846","display_name":"Roberto Andrade","orcid":"https://orcid.org/0000-0002-7120-281X"},"institutions":[{"id":"https://openalex.org/I70764802","display_name":"National Polytechnic School","ror":"https://ror.org/01gb99w41","country_code":"EC","type":"education","lineage":["https://openalex.org/I70764802"]}],"countries":["EC"],"is_corresponding":false,"raw_author_name":"Roberto Andrade","raw_affiliation_strings":["Departamento de Informática y Ciencias de la Computación, Facultad de Ingeniería en Sistemas, Escuela Politécnica Nacional, Quito, Ecuador"],"raw_orcid":"https://orcid.org/0000-0002-7120-281X","affiliations":[{"raw_affiliation_string":"Departamento de Informática y Ciencias de la Computación, Facultad de Ingeniería en Sistemas, Escuela Politécnica Nacional, Quito, Ecuador","institution_ids":["https://openalex.org/I70764802"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.9062,"has_fulltext":true,"cited_by_count":28,"citation_normalized_percentile":{"value":0.97355254,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"12","issue":null,"first_page":"17481","last_page":"17498"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8791202306747437},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8411803841590881},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6901130080223083},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6618955135345459},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6461081504821777},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5201821327209473},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.41141313314437866},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3668486475944519},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.30303966999053955}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8791202306747437},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8411803841590881},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6901130080223083},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6618955135345459},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6461081504821777},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5201821327209473},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.41141313314437866},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3668486475944519},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30303966999053955},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3358840","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3358840","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10414983.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c24b56fd41174e6989768599ffc0e42b","is_oa":true,"landing_page_url":"https://doaj.org/article/c24b56fd41174e6989768599ffc0e42b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 17481-17498 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3358840","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3358840","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10414983.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320327633","display_name":"Escuela Polit\u00e9cnica Nacional","ror":"https://ror.org/01gb99w41"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4391248814.pdf","grobid_xml":"https://content.openalex.org/works/W4391248814.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W2756675797","https://openalex.org/W2799416244","https://openalex.org/W2928980918","https://openalex.org/W2942799786","https://openalex.org/W2949344452","https://openalex.org/W2952983201","https://openalex.org/W2971876914","https://openalex.org/W3006577103","https://openalex.org/W3015308630","https://openalex.org/W3017881119","https://openalex.org/W3019675698","https://openalex.org/W3026882057","https://openalex.org/W3033026647","https://openalex.org/W3036491774","https://openalex.org/W3037506598","https://openalex.org/W3038393372","https://openalex.org/W3088376608","https://openalex.org/W3090850795","https://openalex.org/W3118507196","https://openalex.org/W3119794373","https://openalex.org/W3130714621","https://openalex.org/W3136638767","https://openalex.org/W3160934116","https://openalex.org/W3161858447","https://openalex.org/W3169281546","https://openalex.org/W4207040723","https://openalex.org/W4220921276","https://openalex.org/W4287689466","https://openalex.org/W4293192140","https://openalex.org/W4293414950","https://openalex.org/W4297786991","https://openalex.org/W4309342484","https://openalex.org/W4311515791","https://openalex.org/W4318003016","https://openalex.org/W4321481948","https://openalex.org/W4379514871","https://openalex.org/W4384302771","https://openalex.org/W4386041582","https://openalex.org/W4386257372","https://openalex.org/W6781905506"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2128507946","https://openalex.org/W2728713145","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W2470029541","https://openalex.org/W2470502009"],"abstract_inverted_index":{"Malware":[0],"targeting":[1],"user":[2],"privacy":[3,27,81,118,135],"has":[4],"seen":[5],"a":[6,36,92,105,121,149],"surge":[7],"in":[8,59,183],"recent":[9],"times,":[10],"attributed":[11],"to":[12,40,61,95,163],"evolving":[13],"global":[14],"regulations":[15],"and":[16,22,44,65,72,114,120,148,201],"the":[17,49,86,157,192,203],"boost":[18],"of":[19,51,127],"electronic":[20],"commerce":[21],"online":[23],"services.":[24],"Moreover,":[25],"recognizing":[26],"malware":[28,82,136,196],"that":[29,67,108,172],"employs":[30],"obfuscation":[31],"as":[32,55],"evasion":[33],"mechanism":[34],"presents":[35],"major":[37],"challenge":[38],"due":[39],"its":[41,69],"dynamics,":[42],"resilience,":[43],"polymorphism":[45],"at":[46,213],"runtime,":[47],"necessitating":[48],"application":[50],"forensic":[52],"techniques":[53],"such":[54],"memory":[56],"dumping":[57],"analysis":[58],"order":[60],"reveal":[62],"suitable":[63],"patterns":[64],"behaviors":[66],"enable":[68],"subsequent":[70],"detection":[71],"classification.":[73],"In":[74,167],"this":[75],"paper,":[76],"we":[77],"present":[78],"three":[79],"obfuscated":[80,117,134],"classifiers":[83,139],"trained":[84],"on":[85],"CIC-MalMem-2022":[87],"dataset.":[88],"These":[89,186],"solutions":[90],"include":[91],"binary":[93],"classifier":[94,107,125],"distinguish":[96],"benign":[97,129],"from":[98,131],"malicious":[99],"samples":[100,130],"using":[101,142],"logistic":[102],"regression":[103],"(LR),":[104],"multiclass":[106,124],"further":[109],"categorizes":[110],"benign,":[111],"spyware,":[112],"ransomware,":[113],"trojan":[115],"horse":[116],"malware;":[119],"more":[122],"detailed":[123],"capable":[126],"discriminating":[128],"fifteen":[132],"specific":[133],"families.":[137],"Multiclass":[138],"were":[140],"built":[141],"several":[143],"traditional":[144,175],"machine":[145,176],"learning":[146,177],"algorithms":[147],"novel":[150],"Deep":[151],"Neural":[152],"Network":[153],"(DNN).":[154],"We":[155],"applied":[156],"Synthetic":[158],"Minority":[159],"Oversampling":[160],"Technique":[161],"(SMOTE)":[162],"address":[164],"data":[165],"imbalances.":[166],"particular,":[168],"our":[169],"results":[170],"demonstrate":[171],"DNN":[173],"outperforms":[174],"algorithms,":[178],"yielding":[179],"statistically":[180],"significant":[181],"improvements":[182],"key":[184],"metrics.":[185],"achievements":[187],"reach":[188],"practical":[189],"thresholds,":[190],"suggesting":[191],"potential":[193],"for":[194,207],"enhanced":[195],"protection":[197],"systems.":[198],"The":[199],"dataset":[200],"all":[202],"coding":[204],"files":[205],"required":[206],"experiments":[208],"reproducibility":[209],"are":[210],"publicly":[211],"available":[212],"https://github.com/dcevallossalas/PrivacyMalwareClassifiers.":[214]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":5}],"updated_date":"2026-08-09T07:27:16.801131","created_date":"2025-10-10T00:00:00"}