{"id":"https://openalex.org/W1545528966","doi":"https://doi.org/10.1109/icassp.2015.7178304","title":"Malware classification with recurrent networks","display_name":"Malware classification with recurrent networks","publication_year":2015,"publication_date":"2015-04-01","ids":{"openalex":"https://openalex.org/W1545528966","doi":"https://doi.org/10.1109/icassp.2015.7178304","mag":"1545528966"},"language":"en","primary_location":{"id":"doi:10.1109/icassp.2015.7178304","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp.2015.7178304","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043910056","display_name":"Razvan Pascanu","orcid":"https://orcid.org/0000-0002-5470-1238"},"institutions":[{"id":"https://openalex.org/I70931966","display_name":"Universit\u00e9 de Montr\u00e9al","ror":"https://ror.org/0161xgx34","country_code":"CA","type":"education","lineage":["https://openalex.org/I70931966"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Razvan Pascanu","raw_affiliation_strings":["University of Montreal, Montr\u00e9al, QC, Canada","University of Montreal, Montr\u00e9al QC H3C 3J7 Canada"],"affiliations":[{"raw_affiliation_string":"University of Montreal, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I70931966"]},{"raw_affiliation_string":"University of Montreal, Montr\u00e9al QC H3C 3J7 Canada","institution_ids":["https://openalex.org/I70931966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059859993","display_name":"Jack W. Stokes","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jack W. Stokes","raw_affiliation_strings":["Microsoft Research, One Microsoft Way, Redmond, WA, USA","Microsoft Research, One Microsoft Way, Redmond, WA, 98052 USA"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, One Microsoft Way, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft Research, One Microsoft Way, Redmond, WA, 98052 USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063006106","display_name":"H. Y. Y. Sanossian","orcid":null},"institutions":[{"id":"https://openalex.org/I2800535057","display_name":"IP Australia","ror":"https://ror.org/014vqg108","country_code":"AU","type":"government","lineage":["https://openalex.org/I2800535057","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["AU","US"],"is_corresponding":false,"raw_author_name":"Hermineh Sanossian","raw_affiliation_strings":["Microsoft Pty Ltd, Southbank, VIC, Australia","Microsoft Pty Ltd, Level 5, 4 Freshwater Place, Southbank, VIC 3006 Australia"],"affiliations":[{"raw_affiliation_string":"Microsoft Pty Ltd, Southbank, VIC, Australia","institution_ids":["https://openalex.org/I2800535057"]},{"raw_affiliation_string":"Microsoft Pty Ltd, Level 5, 4 Freshwater Place, Southbank, VIC 3006 Australia","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029654238","display_name":"Mady Marinescu","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mady Marinescu","raw_affiliation_strings":["Microsoft Corp, Redmond, WA, US","Microsoft Corp., One Microsoft Way; Redmond, WA 98052 USA"],"affiliations":[{"raw_affiliation_string":"Microsoft Corp, Redmond, WA, US","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft Corp., One Microsoft Way; Redmond, WA 98052 USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019478468","display_name":"Anil Thomas","orcid":"https://orcid.org/0000-0002-0774-2512"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anil Thomas","raw_affiliation_strings":["One Microsoft Way, Microsoft Corp, Redmond, WA, USA","[One Microsoft Way, Microsoft Corp, Redmond, WA, USA]"],"affiliations":[{"raw_affiliation_string":"One Microsoft Way, Microsoft Corp, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[One Microsoft Way, Microsoft Corp, Redmond, WA, USA]","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5043910056"],"corresponding_institution_ids":["https://openalex.org/I70931966"],"apc_list":null,"apc_paid":null,"fwci":27.613,"has_fulltext":false,"cited_by_count":416,"citation_normalized_percentile":{"value":0.99622235,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1916","last_page":"1920"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12611","display_name":"Neural Networks and Reservoir Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12611","display_name":"Neural Networks and Reservoir Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8142663240432739},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7125807404518127},{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.6467168927192688},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.6381361484527588},{"id":"https://openalex.org/keywords/trigram","display_name":"Trigram","score":0.5946356058120728},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5069653987884521},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.49428248405456543},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.4569582939147949},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4527570903301239},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4041082561016083},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3316892385482788}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8142663240432739},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7125807404518127},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.6467168927192688},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.6381361484527588},{"id":"https://openalex.org/C137546455","wikidata":"https://www.wikidata.org/wiki/Q3213474","display_name":"Trigram","level":2,"score":0.5946356058120728},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5069653987884521},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.49428248405456543},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4569582939147949},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4527570903301239},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4041082561016083},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3316892385482788},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp.2015.7178304","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp.2015.7178304","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W104184427","https://openalex.org/W152196245","https://openalex.org/W179875071","https://openalex.org/W200681053","https://openalex.org/W1487207002","https://openalex.org/W1523493493","https://openalex.org/W1552906779","https://openalex.org/W1810943226","https://openalex.org/W1815076433","https://openalex.org/W1904365287","https://openalex.org/W1966948031","https://openalex.org/W2042454716","https://openalex.org/W2048849611","https://openalex.org/W2064675550","https://openalex.org/W2072772765","https://openalex.org/W2100641262","https://openalex.org/W2107878631","https://openalex.org/W2108563286","https://openalex.org/W2118706537","https://openalex.org/W2121749752","https://openalex.org/W2131774270","https://openalex.org/W2143612262","https://openalex.org/W2144112223","https://openalex.org/W2156387975","https://openalex.org/W2810245342","https://openalex.org/W6608206699","https://openalex.org/W6629167580","https://openalex.org/W6631319189","https://openalex.org/W6633127768","https://openalex.org/W6638273328","https://openalex.org/W6640036494","https://openalex.org/W6678051712","https://openalex.org/W6682889407"],"related_works":["https://openalex.org/W2011383762","https://openalex.org/W2048414027","https://openalex.org/W2033737867","https://openalex.org/W1484884195","https://openalex.org/W1875133464","https://openalex.org/W2126623367","https://openalex.org/W2387363840","https://openalex.org/W2024119624","https://openalex.org/W2387533774","https://openalex.org/W2357427112"],"abstract_inverted_index":{"Attackers":[0],"often":[1],"create":[2],"systems":[3],"that":[4,77],"automatically":[5],"rewrite":[6],"and":[7,56,66,106,114,136],"reorder":[8],"their":[9],"malware":[10,50],"to":[11,32,42,95,144],"avoid":[12],"detection.":[13],"Typical":[14],"machine":[15],"learning":[16],"approaches,":[17],"which":[18,117],"learn":[19],"a":[20,24,37,101,160],"classifier":[21,91],"based":[22],"on":[23],"handcrafted":[25],"feature":[26],"vector,":[27],"are":[28,71,83],"not":[29],"sufficiently":[30],"robust":[31],"such":[33],"reorderings.":[34],"We":[35,99],"propose":[36],"different":[38],"approach,":[39],"which,":[40],"similar":[41],"natural":[43],"language":[44,48],"modeling,":[45],"learns":[46],"the":[47,53,74,79,109,129,140,145,153],"of":[49,104,148,164],"spoken":[51],"through":[52],"executed":[54],"instructions":[55],"extracts":[57,78],"robust,":[58],"time":[59],"domain":[60],"features.":[61,80],"Echo":[62],"state":[63],"networks":[64,69],"(ESNs)":[65],"recurrent":[67,130],"neural":[68],"(RNNs)":[70],"used":[72],"for":[73,108,128,133,139],"projection":[75,110],"stage":[76],"These":[81],"models":[82,116],"trained":[84],"in":[85],"an":[86,126],"unsupervised":[87],"fashion.":[88],"A":[89],"standard":[90,146],"uses":[92,125],"these":[93],"features":[94],"detect":[96],"malicious":[97],"files.":[98],"explore":[100],"few":[102],"variants":[103],"ESNs":[105],"RNNs":[107],"stage,":[111],"including":[112],"Max-Pooling":[113,132],"Half-Frame":[115],"we":[118],"propose.":[119],"The":[120],"best":[121],"performing":[122],"hybrid":[123],"model":[124],"ESN":[127],"model,":[131,150],"non-linear":[134],"sampling,":[135],"logistic":[137],"regression":[138],"final":[141],"classification.":[142],"Compared":[143],"trigram":[147],"events":[149],"it":[151],"improves":[152],"true":[154],"positive":[155,162],"rate":[156,163],"by":[157],"98.3%":[158],"at":[159],"false":[161],"0.1%.":[165]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":33},{"year":2024,"cited_by_count":28},{"year":2023,"cited_by_count":32},{"year":2022,"cited_by_count":53},{"year":2021,"cited_by_count":69},{"year":2020,"cited_by_count":68},{"year":2019,"cited_by_count":61},{"year":2018,"cited_by_count":39},{"year":2017,"cited_by_count":19},{"year":2016,"cited_by_count":6}],"updated_date":"2026-02-27T16:54:17.756197","created_date":"2025-10-10T00:00:00"}