{"id":"https://openalex.org/W7133299072","doi":"https://doi.org/10.1109/ciot67574.2025.11410149","title":"MalVol-25: A Diverse, Labelled and Detailed Volatile Memory Dataset for Malware Detection and Response Testing and Validation","display_name":"MalVol-25: A Diverse, Labelled and Detailed Volatile Memory Dataset for Malware Detection and Response Testing and Validation","publication_year":2025,"publication_date":"2025-10-29","ids":{"openalex":"https://openalex.org/W7133299072","doi":"https://doi.org/10.1109/ciot67574.2025.11410149"},"language":null,"primary_location":{"id":"doi:10.1109/ciot67574.2025.11410149","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ciot67574.2025.11410149","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 8th Conference on Cloud and Internet of Things (CIoT)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025816613","display_name":"Dipo Dunsin","orcid":"https://orcid.org/0009-0009-7376-0477"},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Dipo Dunsin","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University,London,UK","institution_ids":["https://openalex.org/I126193024"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101549630","display_name":"Mohamed Chahine Ghanem","orcid":"https://orcid.org/0000-0002-7067-7848"},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohamed Chahine Ghanem","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University,London,UK","institution_ids":["https://openalex.org/I126193024"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115788287","display_name":"Eduardo Almeida Palmieri","orcid":null},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Eduardo Almeida Palmieri","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University,London,UK","institution_ids":["https://openalex.org/I126193024"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087761119","display_name":"Hamza Kheddar","orcid":"https://orcid.org/0000-0002-9532-2453"},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Hamza Kheddar","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University,London,UK","institution_ids":["https://openalex.org/I126193024"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047868750","display_name":"Yassine Habchi","orcid":"https://orcid.org/0000-0002-8764-9675"},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yassine Habchi","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University,London,UK","institution_ids":["https://openalex.org/I126193024"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I126193024"],"apc_list":null,"apc_paid":null,"fwci":1.5078,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.87299759,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9351000189781189,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9351000189781189,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0210999995470047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.008999999612569809,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8651999831199646},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5375999808311462},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5109000205993652},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.4973999857902527},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.4203999936580658},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.4027000069618225}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8651999831199646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.807699978351593},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5375999808311462},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5109000205993652},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.4973999857902527},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49059998989105225},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4203999936580658},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4059000015258789},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.4027000069618225},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.31310001015663147},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.30399999022483826},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29919999837875366},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.27570000290870667}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ciot67574.2025.11410149","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ciot67574.2025.11410149","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 8th Conference on Cloud and Internet of Things (CIoT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2407313496","https://openalex.org/W2970994078","https://openalex.org/W2972552958","https://openalex.org/W2989373164","https://openalex.org/W3024012711","https://openalex.org/W3118612008","https://openalex.org/W3178297575","https://openalex.org/W4206101301","https://openalex.org/W4288060471","https://openalex.org/W4306316917","https://openalex.org/W4365514507","https://openalex.org/W4387457801","https://openalex.org/W4404936228","https://openalex.org/W4406563968","https://openalex.org/W4407281989","https://openalex.org/W4408145098","https://openalex.org/W4408241012","https://openalex.org/W4409882847","https://openalex.org/W4410512918"],"related_works":[],"abstract_inverted_index":{"This":[0,131],"paper":[1],"addresses":[2],"the":[3,30],"cristical":[4],"need":[5],"for":[6,33,50,135,153],"high-quality":[7],"malware":[8,57,78,126,148],"datasets":[9,23],"that":[10,54],"support":[11],"advanced":[12],"analysis":[13],"techniques,":[14],"particularly":[15],"machine":[16,35],"learning":[17,36],"and":[18,29,37,72,80,86,95,103,106,112,122,128,140,150,159],"agentic":[19],"AI":[20,39],"frameworks.":[21],"Existing":[22],"often":[24],"lack":[25],"diversity,":[26],"comprehensive":[27,107],"labelling,":[28],"complexity":[31],"necessary":[32],"effective":[34],"agent-based":[38],"training.":[40],"To":[41],"fill":[42],"this":[43],"gap,":[44],"we":[45],"developed":[46],"a":[47,52],"systematic":[48],"approach":[49],"generating":[51],"dataset":[53,69],"combines":[55],"automated":[56,102,160],"execution":[58],"in":[59,156],"controlled":[60],"virtual":[61],"environments":[62],"with":[63],"dynamic":[64],"monitoring":[65],"tools.":[66],"The":[67,114],"resulting":[68],"comprises":[70],"clean":[71],"infected":[73],"memory":[74],"snapshots":[75],"across":[76],"multiple":[77],"families":[79],"operating":[81],"systems,":[82],"capturing":[83],"detailed":[84],"behavioural":[85],"environmental":[87],"features.":[88],"Key":[89],"design":[90],"decisions":[91],"include":[92],"applying":[93],"ethical":[94],"legal":[96],"compliance,":[97],"thorough":[98],"validation":[99],"using":[100],"both":[101],"manual":[104],"methods,":[105],"documentation":[108],"to":[109],"ensure":[110],"replicability":[111],"integrity.":[113],"dataset's":[115],"distinctive":[116],"features":[117],"enable":[118],"modelling":[119],"system":[120],"states":[121],"transitions,":[123],"facilitating":[124],"RL-based":[125],"detection":[127],"response":[129,158],"strategies.":[130],"resource":[132],"is":[133],"significant":[134],"advancing":[136],"adaptive":[137],"cybersecurity":[138],"defences":[139],"digital":[141],"forensic":[142],"research.":[143],"Its":[144],"scope":[145],"supports":[146],"diverse":[147],"scenarios":[149],"offers":[151],"potential":[152],"broader":[154],"applications":[155],"incident":[157],"threat":[161],"mitigation.":[162]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-03-04T00:00:00"}