{"id":"https://openalex.org/W2122658150","doi":"https://doi.org/10.1109/icc.2011.5963012","title":"In-Execution Malware Detection Using Task Structures of Linux Processes","display_name":"In-Execution Malware Detection Using Task Structures of Linux Processes","publication_year":2011,"publication_date":"2011-06-01","ids":{"openalex":"https://openalex.org/W2122658150","doi":"https://doi.org/10.1109/icc.2011.5963012","mag":"2122658150"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2011.5963012","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2011.5963012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089972977","display_name":"Farrukh Shahzad","orcid":"https://orcid.org/0000-0002-1095-7207"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Farrukh Shahzad","raw_affiliation_strings":["Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]},{"raw_affiliation_string":"Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052231339","display_name":"Sohail Masood Bhatti","orcid":"https://orcid.org/0000-0002-8210-2785"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Sohail Bhatti","raw_affiliation_strings":["Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]},{"raw_affiliation_string":"Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049422969","display_name":"Muhammad Shahzad","orcid":"https://orcid.org/0000-0003-4342-7875"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muhammad Shahzad","raw_affiliation_strings":["Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]},{"raw_affiliation_string":"Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103408949","display_name":"Muddassar Farooq","orcid":"https://orcid.org/0009-0009-1882-7819"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muddassar Farooq","raw_affiliation_strings":["Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Next Generation Intelligent Networks Research Center (nexGIN RC), National University of Computer & Emerging Sciences (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]},{"raw_affiliation_string":"Next Generation Intell. Networks Res. Center (nexGIN RC), Nat. Univ. of Comput. & Emerging Sci. (FAST-NUCES), Islamabad, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I201384688"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8280748128890991},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.7493799924850464},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7447555065155029},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.6636380553245544},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6375684142112732},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.629881739616394},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.6187671422958374},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6082200407981873},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.4418044686317444},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.4334183931350708},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.43330246210098267},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.38620084524154663},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14317330718040466},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.085367351770401}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8280748128890991},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.7493799924850464},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7447555065155029},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.6636380553245544},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6375684142112732},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.629881739616394},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.6187671422958374},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6082200407981873},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.4418044686317444},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.4334183931350708},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.43330246210098267},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.38620084524154663},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14317330718040466},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.085367351770401},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icc.2011.5963012","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2011.5963012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.662.5575","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.662.5575","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://nexginrc.org/Publications/pub_files/ICC11-Farrukh.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6399999856948853,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W15008180","https://openalex.org/W123548525","https://openalex.org/W1570448133","https://openalex.org/W1947347140","https://openalex.org/W2002380285","https://openalex.org/W2020880787","https://openalex.org/W2114849876","https://openalex.org/W2123886726","https://openalex.org/W2128217000","https://openalex.org/W2140908857","https://openalex.org/W2146856087","https://openalex.org/W2160892968","https://openalex.org/W2163931946","https://openalex.org/W2519765358","https://openalex.org/W2966207845","https://openalex.org/W6604982192","https://openalex.org/W6640877134","https://openalex.org/W6678985388"],"related_works":["https://openalex.org/W2354398839","https://openalex.org/W2171038386","https://openalex.org/W1998188341","https://openalex.org/W2547946241","https://openalex.org/W4310805820","https://openalex.org/W2400599487","https://openalex.org/W2469346691","https://openalex.org/W3211525895","https://openalex.org/W2765174411","https://openalex.org/W2965893286"],"abstract_inverted_index":{"In":[0],"this":[1,68],"paper,":[2],"we":[3,85,167],"present":[4],"a":[5,17,36,50,66,80,92,117,140,142,175],"novel":[6],"framework":[7,70],"--":[8,19,42,52],"it":[9,170],"uses":[10],"the":[11,25,44,99,165],"information":[12,45],"in":[13,46,95],"kernel":[14,47,93],"structures":[15,48,109],"of":[16,24,27,49,82,103,106,121,144],"process":[18,37,51],"to":[20,113,178],"do":[21],"run-time":[22],"analysis":[23,32,102,125],"behavior":[26],"an":[28],"executing":[29],"program.":[30],"Our":[31,124],"shows":[33],"that":[34,127,169],"classifying":[35],"as":[38,65,91,139],"malicious":[39,137],"or":[40],"benign":[41,135],"using":[43],"is":[53,171],"not":[54,164],"only":[55],"very":[56,61,172],"accurate":[57],"but":[58,163],"also":[59],"has":[60],"low":[62],"processing":[63],"overheads;":[64],"result,":[67,141],"lightweight":[69],"can":[71],"be":[72],"incorporated":[73],"within":[74,159],"operating":[75,146],"system":[76,90,182],"kernel.":[77],"To":[78],"provide":[79,150],"proof-of-concept":[81],"our":[83,89],"thesis,":[84],"design":[86],"and":[87,110,136],"implement":[88],"module":[94],"Linux.":[96],"We":[97],"perform":[98],"time":[100],"series":[101],"118":[104],"parameters":[105],"Linux":[107],"task":[108],"pre-process":[111],"them":[112],"come":[114],"up":[115],"with":[116,154],"minimal":[118],"features'":[119],"set":[120],"11":[122],"features.":[123,184],"show":[126],"these":[128,148,180],"features":[129,149],"have":[130],"remarkably":[131],"different":[132],"values":[133],"for":[134,174],"processes;":[138],"number":[143],"classifiers":[145],"on":[147],"93%":[151],"detection":[152],"accuracy":[153],"0%":[155],"false":[156],"alarm":[157],"rate":[158],"100":[160],"milliseconds.":[161],"Last":[162],"least,":[166],"justify":[168],"difficult":[173],"crafty":[176],"attacker":[177],"evade":[179],"low-level":[181],"specific":[183]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}