{"id":"https://openalex.org/W7160540108","doi":"https://doi.org/10.1109/access.2026.3691124","title":"Malware Detection and Encryption: A Meta-Survey With a Unified Analytical Framework","display_name":"Malware Detection and Encryption: A Meta-Survey With a Unified Analytical Framework","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160540108","doi":"https://doi.org/10.1109/access.2026.3691124"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3691124","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691124","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3691124","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047739580","display_name":"Aleksandra Pawlicka","orcid":"https://orcid.org/0000-0003-4380-014X"},"institutions":[{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Aleksandra Pawlicka","raw_affiliation_strings":["ITTI, Poznań, Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITTI, Poznań, Poland","institution_ids":["https://openalex.org/I4210118437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088536972","display_name":"Marek Pawlicki","orcid":"https://orcid.org/0000-0001-5881-6406"},"institutions":[{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Marek Pawlicki","raw_affiliation_strings":["ITTI, Poznań, Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITTI, Poznań, Poland","institution_ids":["https://openalex.org/I4210118437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006525330","display_name":"Pawe\u0142 Rajba","orcid":"https://orcid.org/0000-0003-4252-5545"},"institutions":[{"id":"https://openalex.org/I120691247","display_name":"FernUniversit\u00e4t in Hagen","ror":"https://ror.org/04tkkr536","country_code":"DE","type":"education","lineage":["https://openalex.org/I120691247"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Pawe\u0142 Rajba","raw_affiliation_strings":["FernUniversität in Hagen, Hagen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FernUniversität in Hagen, Hagen, Germany","institution_ids":["https://openalex.org/I120691247"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135588106","display_name":"Rafa\u0142 Kozik","orcid":null},"institutions":[{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Rafa\u0142 Kozik","raw_affiliation_strings":["ITTI, Poznań, Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITTI, Poznań, Poland","institution_ids":["https://openalex.org/I4210118437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089469997","display_name":"Wojciech Mazurczyk","orcid":"https://orcid.org/0000-0002-8509-4127"},"institutions":[{"id":"https://openalex.org/I120691247","display_name":"FernUniversit\u00e4t in Hagen","ror":"https://ror.org/04tkkr536","country_code":"DE","type":"education","lineage":["https://openalex.org/I120691247"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wojciech Mazurczyk","raw_affiliation_strings":["FernUniversität in Hagen, Hagen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FernUniversität in Hagen, Hagen, Germany","institution_ids":["https://openalex.org/I120691247"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082854095","display_name":"Luca Caviglione","orcid":"https://orcid.org/0000-0001-6466-3354"},"institutions":[{"id":"https://openalex.org/I4210144062","display_name":"Consorzio Roma Ricerche","ror":"https://ror.org/03jvpn714","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210144062"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Luca Caviglione","raw_affiliation_strings":["Consiglio Nazionale delle Ricerche, Rome, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6466-3354","affiliations":[{"raw_affiliation_string":"Consiglio Nazionale delle Ricerche, Rome, Italy","institution_ids":["https://openalex.org/I4210144062"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135566292","display_name":"Micha\u0142 Chora\u015b","orcid":"https://orcid.org/0000-0003-1405-9911"},"institutions":[{"id":"https://openalex.org/I1300393620","display_name":"Bydgoszcz University of Science and Technology","ror":"https://ror.org/049eq0c58","country_code":"PL","type":"education","lineage":["https://openalex.org/I1300393620"]},{"id":"https://openalex.org/I686019","display_name":"AGH University of Krakow","ror":"https://ror.org/00bas1c41","country_code":"PL","type":"education","lineage":["https://openalex.org/I686019"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Micha\u0142 Chora\u015b","raw_affiliation_strings":["Bydgoszcz University of Science and Technology, Bydgoszcz, Poland"],"raw_orcid":"https://orcid.org/0000-0003-1405-9911","affiliations":[{"raw_affiliation_string":"Bydgoszcz University of Science and Technology, Bydgoszcz, Poland","institution_ids":["https://openalex.org/I1300393620","https://openalex.org/I686019"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.56600791,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"73006","last_page":"73028"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.002400000113993883,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7322999835014343},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.633899986743927},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6277999877929688},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5422999858856201},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5329999923706055},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5249000191688538},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.45590001344680786},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.43639999628067017},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.3215999901294708},{"id":"https://openalex.org/keywords/steganography","display_name":"Steganography","score":0.3118000030517578}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8019999861717224},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7322999835014343},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6678000092506409},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.633899986743927},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6277999877929688},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5422999858856201},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5329999923706055},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5249000191688538},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.43639999628067017},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3452000021934509},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.3215999901294708},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.3118000030517578},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.30809998512268066},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2870999872684479},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.28299999237060547},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.2736999988555908},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.27309998869895935},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.2689000070095062},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.2639999985694885},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.263700008392334},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2515999972820282},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.2513999938964844},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3691124","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691124","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:4ceffa99fe3e4939b79811cbe9a0e7f9","is_oa":true,"landing_page_url":"https://doaj.org/article/4ceffa99fe3e4939b79811cbe9a0e7f9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 73006-73028 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3691124","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691124","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.5040321350097656}],"awards":[{"id":"https://openalex.org/G3263294820","display_name":null,"funder_award_id":"101225653","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"paper":[1,78],"presents":[2],"a":[3,29,42,60,89,98],"meta-survey":[4],"of":[5,9,18,31,50,63,101,110],"the":[6,10,16,48,56,105,115,129],"current":[7],"state":[8],"art":[11],"in":[12,24,114,128],"malware":[13,83,111],"detection":[14,84,141],"and":[15,21,73,107,123,139],"use":[17],"cryptographic":[19,106],"evasion":[20],"obfuscation":[22],"techniques":[23],"malicious":[25],"software.":[26],"Based":[27],"on":[28,69],"corpus":[30],"over":[32],"70":[33],"selected":[34],"studies,":[35],"it":[36],"synthesises":[37],"heterogeneous":[38],"survey":[39,58,116],"findings":[40],"via":[41],"unified":[43],"analytical":[44],"framework.":[45],"Then,":[46],"as":[47,88,97],"topic":[49],"crypto-malware":[51],"is":[52,66,85,112],"largely":[53],"absent":[54],"from":[55],"academic":[57],"corpus,":[59],"narrative":[61],"review":[62],"those":[64],"mechanisms":[65],"provided,":[67],"drawing":[68],"primary":[70],"technical":[71],"literature":[72,117],"industry":[74],"threat":[75],"intelligence.":[76],"The":[77],"identifies":[79],"four":[80],"principal":[81],"findings:":[82],"increasingly":[86],"framed":[87],"representation-aware":[90],"learning":[91],"pipeline;":[92],"robustness":[93],"must":[94],"be":[95],"treated":[96],"first-order":[99],"qualifier":[100],"any":[102],"state-of-the-art":[103],"claim;":[104],"steganographic":[108],"dimension":[109],"underrepresented":[113],"relative":[118],"to":[119],"its":[120],"operational":[121],"relevance;":[122],"persistent":[124],"white":[125],"spaces":[126],"remain":[127],"literature,":[130],"particularly":[131],"for":[132],"IoT":[133],"graph-based":[134],"detection,":[135,138],"Android":[136],"image-based":[137],"crypto/stego-aware":[140],"pipelines.":[142]},"counts_by_year":[],"updated_date":"2026-05-19T06:13:58.757530","created_date":"2026-05-08T00:00:00"}