{"id":"https://openalex.org/W4392904133","doi":"https://doi.org/10.1109/icassp48485.2024.10446565","title":"Discovering Malicious Signatures in Software from Structural Interactions","display_name":"Discovering Malicious Signatures in Software from Structural Interactions","publication_year":2024,"publication_date":"2024-03-18","ids":{"openalex":"https://openalex.org/W4392904133","doi":"https://doi.org/10.1109/icassp48485.2024.10446565"},"language":"en","primary_location":{"id":"doi:10.1109/icassp48485.2024.10446565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp48485.2024.10446565","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037487522","display_name":"Chenzhong Yin","orcid":"https://orcid.org/0000-0001-6411-7441"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chenzhong Yin","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051915491","display_name":"Hantang Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hantang Zhang","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057367919","display_name":"Mingxi Cheng","orcid":"https://orcid.org/0000-0002-8070-6665"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mingxi Cheng","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004690249","display_name":"Xiongye Xiao","orcid":"https://orcid.org/0000-0002-3181-7166"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiongye Xiao","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072653287","display_name":"Xinghe Chen","orcid":"https://orcid.org/0000-0002-8686-359X"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinghe Chen","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109499273","display_name":"Xin Ren","orcid":null},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xin Ren","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105925385","display_name":"Paul Bogdan","orcid":"https://orcid.org/0000-0003-2118-0816"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Bogdan","raw_affiliation_strings":["University of Southern California,Los Angeles,CA,USA","University of Southern California, Los Angeles, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California,Los Angeles,CA,USA","institution_ids":["https://openalex.org/I1174212"]},{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1174212"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4845","last_page":"4849"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9840999841690063,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9429548978805542},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8541284799575806},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5838110446929932},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5799676179885864},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5103515982627869},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.46619218587875366},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.44510504603385925},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4331373870372772},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3352622389793396},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.32560497522354126},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11768677830696106}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9429548978805542},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8541284799575806},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5838110446929932},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5799676179885864},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5103515982627869},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.46619218587875366},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.44510504603385925},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4331373870372772},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3352622389793396},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.32560497522354126},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11768677830696106},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp48485.2024.10446565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp48485.2024.10446565","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1793684569","display_name":"CAREER: Embracing Complexity: A Fractal Calculus Approach to the Modeling and Optimization of Medical Cyber-Physical Systems","funder_award_id":"1453860","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1889334499","display_name":"FMitF: A Novel Framework for Learning Formal Abstractions and Causal Relations from Temporal Behaviors","funder_award_id":"1837131","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2031003259","display_name":"CENTER FOR COMPLEX PARTICLE SYSTEMS (COMPASS)","funder_award_id":"2243104","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2124363290","display_name":null,"funder_award_id":"MCB-1936775","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5876574054","display_name":"CPS: Small: Uncertainty-aware Framework for Specifying, Designing and Verifying Cyber-Physical Systems","funder_award_id":"1932620","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6193981907","display_name":null,"funder_award_id":"N66001-17-1-4044","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G6597929117","display_name":"Collaborative Research: MODULUS: A Novel Spatiotemporal Multifractal Analysis to Evaluate Genome Dynamics","funder_award_id":"1936775","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8116892299","display_name":null,"funder_award_id":"CCF-1837131","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8535605147","display_name":null,"funder_award_id":"CNS-1932620","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320308204","display_name":"Northrop Grumman","ror":"https://ror.org/05kewds18"},{"id":"https://openalex.org/F4320316514","display_name":"Arm","ror":"https://ror.org/04mmhzs81"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2065890363","https://openalex.org/W2885070483","https://openalex.org/W2889100747","https://openalex.org/W2895764107","https://openalex.org/W2938888905","https://openalex.org/W2974072230","https://openalex.org/W2978600004","https://openalex.org/W2986013500","https://openalex.org/W3167995052","https://openalex.org/W3215132138","https://openalex.org/W3216526200","https://openalex.org/W4205521168","https://openalex.org/W4241572510","https://openalex.org/W4246166885","https://openalex.org/W4281659734","https://openalex.org/W4294383271","https://openalex.org/W4294558607","https://openalex.org/W4313528065","https://openalex.org/W4321349946","https://openalex.org/W6738964360"],"related_works":["https://openalex.org/W4256304280","https://openalex.org/W4249009605","https://openalex.org/W2900526031","https://openalex.org/W2395100307","https://openalex.org/W2909615516","https://openalex.org/W4234891089","https://openalex.org/W2067547021","https://openalex.org/W2805262980","https://openalex.org/W3107556205","https://openalex.org/W2610659201"],"abstract_inverted_index":{"Malware":[0],"represents":[1],"a":[2,60,93,148,156,159,185,204,211],"significant":[3],"security":[4],"concern":[5],"in":[6,147,169,207],"today\u2019s":[7],"digital":[8],"landscape,":[9],"as":[10,33,120],"it":[11],"can":[12],"destroy":[13],"or":[14],"disable":[15],"operating":[16],"systems,":[17],"steal":[18],"sensitive":[19],"user":[20],"information,":[21],"and":[22,35,45,71,79,82,111,141,176,215],"occupy":[23],"valuable":[24],"disk":[25],"space.":[26],"However,":[27],"current":[28,221],"malware":[29,44,62,140,175,208,223],"detection":[30,63,187,224],"methods,":[31],"such":[32],"static-based":[34],"dynamic-based":[36],"approaches,":[37],"struggle":[38],"to":[39,89,106,132,137,220],"identify":[40],"newly":[41],"developed":[42],"(\"zero-day\")":[43],"are":[46,100],"limited":[47],"by":[48],"customized":[49],"virtual":[50],"machine":[51],"(VM)":[52],"environments.":[53],"To":[54,150],"overcome":[55],"these":[56],"limitations,":[57],"we":[58,154],"propose":[59],"novel":[61],"approach":[64,75,202],"that":[65],"leverages":[66],"deep":[67],"learning,":[68],"mathematical":[69],"techniques,":[70],"network":[72,98],"science.":[73],"Our":[74,201],"focuses":[76],"on":[77,158],"static":[78],"dynamic":[80],"analysis":[81],"utilizes":[83],"the":[84,103,116,124,128,193],"Low-Level":[85],"Virtual":[86],"Machine":[87],"(LLVM)":[88],"profile":[90],"applications":[91],"within":[92],"complex":[94],"network.":[95],"The":[96,182,226],"generated":[97],"topologies":[99],"input":[101],"into":[102],"GraphSAGE":[104,125],"architecture":[105],"efficiently":[107],"distinguish":[108],"between":[109],"benign":[110,180],"malicious":[112],"software":[113],"applications,":[114,166],"with":[115,189],"operation":[117],"names":[118],"denoted":[119],"node":[121],"features.":[122],"Importantly,":[123],"models":[126],"analyze":[127],"network\u2019s":[129],"topological":[130],"geometry":[131],"make":[133],"predictions,":[134],"enabling":[135],"them":[136],"detect":[138],"state-of-the-art":[139,222],"prevent":[142],"potential":[143],"damage":[144],"during":[145],"execution":[146],"VM.":[149],"evaluate":[151],"our":[152],"approach,":[153],"conduct":[155],"study":[157],"dataset":[160],"comprising":[161],"source":[162],"code":[163,227],"from":[164,173],"24,376":[165],"specifically":[167],"written":[168],"C/C++,":[170],"sourced":[171],"directly":[172],"widely-recognized":[174],"various":[177],"types":[178],"of":[179,199],"software.":[181],"results":[183],"show":[184],"high":[186],"performance":[188],"an":[190],"Area":[191],"Under":[192],"Receiver":[194],"Operating":[195],"Characteristic":[196],"Curve":[197],"(AUROC)":[198],"99.85%.":[200],"marks":[203],"substantial":[205],"improvement":[206],"detection,":[209],"providing":[210],"notably":[212],"more":[213],"accurate":[214],"efficient":[216],"solution":[217],"when":[218],"compared":[219],"methods.":[225],"is":[228],"released":[229],"at":[230],"https://github.com/HantangZhang/MGN.":[231]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}