{"id":"https://openalex.org/W2632775315","doi":"https://doi.org/10.1109/icassp.2017.7952603","title":"Malware classification with LSTM and GRU language models and a character-level CNN","display_name":"Malware classification with LSTM and GRU language models and a character-level CNN","publication_year":2017,"publication_date":"2017-03-01","ids":{"openalex":"https://openalex.org/W2632775315","doi":"https://doi.org/10.1109/icassp.2017.7952603","mag":"2632775315"},"language":"en","primary_location":{"id":"doi:10.1109/icassp.2017.7952603","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp.2017.7952603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013502032","display_name":"Ben Athiwaratkun","orcid":"https://orcid.org/0000-0002-2009-496X"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ben Athiwaratkun","raw_affiliation_strings":["Department of Statistical Science, Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Statistical Science, Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059859993","display_name":"Jack W. Stokes","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jack W. Stokes","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":16.4286,"has_fulltext":false,"cited_by_count":243,"citation_normalized_percentile":{"value":0.99442305,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2482","last_page":"2486"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12611","display_name":"Neural Networks and Reservoir Computing","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8667302131652832},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7735297679901123},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7244065403938293},{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.672393262386322},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5861754417419434},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.5486963987350464},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5418712496757507},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.5353126525878906},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.5338457822799683},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.46087270975112915},{"id":"https://openalex.org/keywords/machine-translation","display_name":"Machine translation","score":0.4459458589553833},{"id":"https://openalex.org/keywords/word-error-rate","display_name":"Word error rate","score":0.4447004199028015},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.44076356291770935},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.419960618019104},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3847845792770386}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8667302131652832},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7735297679901123},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7244065403938293},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.672393262386322},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5861754417419434},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.5486963987350464},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5418712496757507},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.5353126525878906},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.5338457822799683},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.46087270975112915},{"id":"https://openalex.org/C203005215","wikidata":"https://www.wikidata.org/wiki/Q79798","display_name":"Machine translation","level":2,"score":0.4459458589553833},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.4447004199028015},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.44076356291770935},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.419960618019104},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3847845792770386},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp.2017.7952603","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp.2017.7952603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W179875071","https://openalex.org/W200681053","https://openalex.org/W1487207002","https://openalex.org/W1545528966","https://openalex.org/W1665214252","https://openalex.org/W1884606608","https://openalex.org/W1893133781","https://openalex.org/W1924770834","https://openalex.org/W1966948031","https://openalex.org/W2064675550","https://openalex.org/W2108563286","https://openalex.org/W2118706537","https://openalex.org/W2121749752","https://openalex.org/W2131774270","https://openalex.org/W2133564696","https://openalex.org/W2144112223","https://openalex.org/W2170240176","https://openalex.org/W2331896832","https://openalex.org/W2476429474","https://openalex.org/W2963012544","https://openalex.org/W2964199361","https://openalex.org/W2964308564","https://openalex.org/W6608206699","https://openalex.org/W6629167580","https://openalex.org/W6637242042","https://openalex.org/W6639223989","https://openalex.org/W6640212811","https://openalex.org/W6678051712","https://openalex.org/W6679434410","https://openalex.org/W6685053522"],"related_works":["https://openalex.org/W2160451571","https://openalex.org/W2495256954","https://openalex.org/W3214491504","https://openalex.org/W1566315437","https://openalex.org/W2259317772","https://openalex.org/W2594897229","https://openalex.org/W4221142855","https://openalex.org/W4387022695","https://openalex.org/W2151348424","https://openalex.org/W2050138804"],"abstract_inverted_index":{"Malicious":[0],"software,":[1],"or":[2,69],"malware,":[3],"continues":[4],"to":[5,38,47,110,119,130,176],"be":[6],"a":[7,25,32,48,63,87,95,141,148,167,183],"problem":[8],"for":[9],"computer":[10],"users,":[11],"corporations,":[12],"and":[13,94,163],"governments.":[14],"Previous":[15],"research":[16],"[1]":[17,181],"has":[18],"explored":[19],"training":[20],"file-based,":[21],"malware":[22,33,51,82,144],"classifiers":[23],"using":[24,105],"two-stage":[26],"approach.":[27],"In":[28,53,75],"the":[29,40,58,113,132,157,171,177],"first":[30],"stage,":[31],"language":[34,59,92,100],"model":[35,60,93],"is":[36,44,61],"used":[37,123],"learn":[39],"feature":[41],"representation":[42,134],"which":[43,85],"then":[45],"input":[46],"second":[49],"stage":[50],"classifier.":[52],"Pascanu":[54],"et":[55],"al.":[56],"[1],":[57,125],"either":[62],"standard":[64],"recurrent":[65,97],"neural":[66,136,151],"network":[67,73,152],"(RNN)":[68],"an":[70,106,127],"echo":[71],"state":[72],"(ESN).":[74],"this":[76],"work,":[77],"we":[78,139],"propose":[79,104,140],"several":[80],"new":[81,142],"classification":[83],"architectures":[84],"include":[86],"long":[88],"short-term":[89],"memory":[90],"(LSTM)":[91],"gated":[96],"unit":[98],"(GRU)":[99],"model.":[101],"We":[102],"also":[103],"attention":[107],"mechanism":[108],"similar":[109],"[12]":[111],"from":[112,135],"machine":[114],"translation":[115],"literature,":[116],"in":[117,124,170,180],"addition":[118],"temporal":[120,160],"max":[121,161],"pooling":[122,162],"as":[126],"alternative":[128],"way":[129],"construct":[131],"file":[133],"features.":[137],"Finally,":[138],"single-stage":[143],"classifier":[145],"based":[146],"on":[147],"character-level":[149],"convolutional":[150],"(CNN).":[153],"Results":[154],"show":[155],"that":[156],"LSTM":[158],"with":[159],"logistic":[164],"regression":[165],"offers":[166],"31.3%":[168],"improvement":[169],"true":[172],"positive":[173,185],"rate":[174,186],"compared":[175],"best":[178],"system":[179],"at":[182],"false":[184],"of":[187],"1%.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":25},{"year":2022,"cited_by_count":43},{"year":2021,"cited_by_count":46},{"year":2020,"cited_by_count":37},{"year":2019,"cited_by_count":37},{"year":2018,"cited_by_count":16},{"year":2017,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}