{"id":"https://openalex.org/W4414539122","doi":"https://doi.org/10.1109/icc52391.2025.11161770","title":"MADEA: A Malware Detection Architecture for IoT Blending Network Monitoring and Device Attestation","display_name":"MADEA: A Malware Detection Architecture for IoT Blending Network Monitoring and Device Attestation","publication_year":2025,"publication_date":"2025-06-08","ids":{"openalex":"https://openalex.org/W4414539122","doi":"https://doi.org/10.1109/icc52391.2025.11161770"},"language":"en","primary_location":{"id":"doi:10.1109/icc52391.2025.11161770","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11161770","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045279787","display_name":"Renascence Tarafder Prapty","orcid":null},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]},{"id":"https://openalex.org/I4210137750","display_name":"UC Irvine Health","ror":"https://ror.org/03fgher32","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210137750"]},{"id":"https://openalex.org/I4210140791","display_name":"Irvine University","ror":"https://ror.org/04ysmca02","country_code":"US","type":"education","lineage":["https://openalex.org/I4210140791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Renascence Tarafder Prapty","raw_affiliation_strings":["University of California Irvine (UCI),USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California Irvine (UCI),USA","institution_ids":["https://openalex.org/I204250578","https://openalex.org/I4210137750","https://openalex.org/I4210140791"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084404670","display_name":"Rahmadi Trimananda","orcid":"https://orcid.org/0000-0002-9900-7506"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]},{"id":"https://openalex.org/I4210137750","display_name":"UC Irvine Health","ror":"https://ror.org/03fgher32","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210137750"]},{"id":"https://openalex.org/I4210140791","display_name":"Irvine University","ror":"https://ror.org/04ysmca02","country_code":"US","type":"education","lineage":["https://openalex.org/I4210140791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rahmadi Trimananda","raw_affiliation_strings":["University of California Irvine (UCI),USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California Irvine (UCI),USA","institution_ids":["https://openalex.org/I204250578","https://openalex.org/I4210137750","https://openalex.org/I4210140791"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075765037","display_name":"Sashidhar Jakkamsetti","orcid":"https://orcid.org/0000-0002-5338-3522"},"institutions":[{"id":"https://openalex.org/I889804353","display_name":"Robert Bosch (Germany)","ror":"https://ror.org/01fe0jt45","country_code":"DE","type":"company","lineage":["https://openalex.org/I889804353"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sashidhar Jakkamsetti","raw_affiliation_strings":["Bosch Research (Work done while at UCI),Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bosch Research (Work done while at UCI),Germany","institution_ids":["https://openalex.org/I889804353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009882362","display_name":"Gene Tsudik","orcid":"https://orcid.org/0000-0002-8467-8614"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]},{"id":"https://openalex.org/I4210137750","display_name":"UC Irvine Health","ror":"https://ror.org/03fgher32","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210137750"]},{"id":"https://openalex.org/I4210140791","display_name":"Irvine University","ror":"https://ror.org/04ysmca02","country_code":"US","type":"education","lineage":["https://openalex.org/I4210140791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gene Tsudik","raw_affiliation_strings":["University of California Irvine (UCI),USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California Irvine (UCI),USA","institution_ids":["https://openalex.org/I204250578","https://openalex.org/I4210137750","https://openalex.org/I4210140791"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013543313","display_name":"Athina Markopoulou","orcid":"https://orcid.org/0000-0003-1803-8675"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]},{"id":"https://openalex.org/I4210137750","display_name":"UC Irvine Health","ror":"https://ror.org/03fgher32","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210137750"]},{"id":"https://openalex.org/I4210140791","display_name":"Irvine University","ror":"https://ror.org/04ysmca02","country_code":"US","type":"education","lineage":["https://openalex.org/I4210140791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Athina Markopoulou","raw_affiliation_strings":["University of California Irvine (UCI),USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California Irvine (UCI),USA","institution_ids":["https://openalex.org/I204250578","https://openalex.org/I4210137750","https://openalex.org/I4210140791"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"5785","last_page":"5790"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9778000116348267,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9236000180244446},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4968000054359436},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.47279998660087585},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.3849000036716461},{"id":"https://openalex.org/keywords/energy","display_name":"Energy (signal processing)","score":0.37470000982284546},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.3499999940395355}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9236000180244446},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7574999928474426},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5318999886512756},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4968000054359436},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.47279998660087585},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3849000036716461},{"id":"https://openalex.org/C186370098","wikidata":"https://www.wikidata.org/wiki/Q442787","display_name":"Energy (signal processing)","level":2,"score":0.37470000982284546},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3499999940395355},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.32839998602867126},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3190999925136566},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2969000041484833},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.29120001196861267},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.272599995136261},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2565999925136566}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc52391.2025.11161770","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11161770","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G321131919","display_name":null,"funder_award_id":"SATC-1956393","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2168816812","https://openalex.org/W2739746516","https://openalex.org/W2799758613","https://openalex.org/W2945159175","https://openalex.org/W2973368506","https://openalex.org/W2982426954","https://openalex.org/W3007016253","https://openalex.org/W3022162203","https://openalex.org/W3083527560","https://openalex.org/W4206724648","https://openalex.org/W4226466613","https://openalex.org/W4387873916"],"related_works":[],"abstract_inverted_index":{"Internet-of-Things":[0],"(IoT)":[1],"devices":[2],"are":[3],"vulnerable":[4],"to":[5,13,38,83,88,113],"malware":[6,40,61,89,115,131],"and":[7,51,78,109],"require":[8],"new":[9],"mitigation":[10],"techniques":[11],"due":[12],"their":[14],"limited":[15],"resources.":[16],"To":[17,63],"that":[18,72,177],"end,":[19],"previous":[20],"research":[21],"has":[22],"used":[23],"periodic":[24,159],"Remote":[25],"Attestation":[26],"(<tex":[27,34],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[28,35,46,53,75,80,94,122,149,161,169],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$R":[29],"A$</tex>)":[30,37],"or":[31,128],"Traffic":[32],"Analysis":[33],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$\\mathcal{T}":[36],"detect":[39,114],"in":[41,119,181],"IoT":[42],"devices.":[43],"However,":[44],"<tex":[45,52,74,79,93,121,148,160,168],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$\\mathcal{R":[47,76,123,162],"A}$</tex>":[48,77,82,124,163],"is":[49],"expensive,":[50],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$\\mathcal{T}$</tex>":[54,95],"A":[55,96],"only":[56],"raises":[57],"suspicion":[58],"without":[59,156],"confirming":[60],"presence.":[62],"solve":[64],"this,":[65],"we":[66],"design":[67],"MADEA,":[68,157],"the":[69,126,133,173],"first":[70],"system":[71],"blends":[73],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$\\mathcal{T":[81],"offer":[84],"a":[85,178],"comprehensive":[86],"approach":[87],"detection":[90,153],"for":[91],"IoT.":[92],"builds":[97],"profiles":[98],"of":[99,106,130,175],"expected":[100],"packet":[101],"traces":[102],"during":[103],"benign":[104],"operations":[105],"each":[107],"device":[108,179],"then":[110],"uses":[111],"them":[112],"from":[116],"network":[117],"traffic":[118],"real-time.":[120],"confirms":[125],"presence":[127],"absence":[129],"on":[132],"device.":[134],"MADEA":[135],"achieves":[136],"100":[137],"%":[138],"true":[139],"positive":[140],"rate.":[141],"It":[142],"also":[143],"outperforms":[144],"other":[145],"approaches":[146],"with":[147],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$160":[150],"\\times$</tex>":[151,172],"faster":[152],"time.":[154],"Finally,":[155],"effective":[158],"can":[164],"consume":[165],"at":[166],"least":[167],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$\\sim":[170],"14":[171],"amount":[174],"energy":[176],"needs":[180],"one":[182],"hour.":[183]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}