{"id":"https://openalex.org/W4391129725","doi":"https://doi.org/10.1109/iccp60212.2023.10398680","title":"Efficient Multi-Stage Detection of Malicious Windows Executable During Execution","display_name":"Efficient Multi-Stage Detection of Malicious Windows Executable During Execution","publication_year":2023,"publication_date":"2023-10-26","ids":{"openalex":"https://openalex.org/W4391129725","doi":"https://doi.org/10.1109/iccp60212.2023.10398680"},"language":"en","primary_location":{"id":"doi:10.1109/iccp60212.2023.10398680","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iccp60212.2023.10398680","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 19th International Conference on Intelligent Computer Communication and Processing (ICCP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006746992","display_name":"Radu-Marian Portase","orcid":null},"institutions":[{"id":"https://openalex.org/I158333966","display_name":"Technical University of Cluj-Napoca","ror":"https://ror.org/03r8nwp71","country_code":"RO","type":"education","lineage":["https://openalex.org/I158333966"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Radu-Marian Portase","raw_affiliation_strings":["Technical University of Cluj-Napoca, Bitdefender,Cluj-Napoca,Romania","Technical University of Cluj-Napoca, Bitdefender, Cluj-Napoca, Romania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Cluj-Napoca, Bitdefender,Cluj-Napoca,Romania","institution_ids":["https://openalex.org/I158333966"]},{"raw_affiliation_string":"Technical University of Cluj-Napoca, Bitdefender, Cluj-Napoca, Romania","institution_ids":["https://openalex.org/I158333966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060431360","display_name":"Adrian Cole\u015fa","orcid":"https://orcid.org/0000-0002-2431-4253"},"institutions":[{"id":"https://openalex.org/I158333966","display_name":"Technical University of Cluj-Napoca","ror":"https://ror.org/03r8nwp71","country_code":"RO","type":"education","lineage":["https://openalex.org/I158333966"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Adrian Cole\u015fa","raw_affiliation_strings":["Technical University of Cluj-Napoca,Cluj-Napoca,Romania","Technical University of Cluj-Napoca, Cluj-Napoca, Romania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Cluj-Napoca,Cluj-Napoca,Romania","institution_ids":["https://openalex.org/I158333966"]},{"raw_affiliation_string":"Technical University of Cluj-Napoca, Cluj-Napoca, Romania","institution_ids":["https://openalex.org/I158333966"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015255095","display_name":"Gheorghe Sebestyen","orcid":"https://orcid.org/0000-0002-7773-1077"},"institutions":[{"id":"https://openalex.org/I158333966","display_name":"Technical University of Cluj-Napoca","ror":"https://ror.org/03r8nwp71","country_code":"RO","type":"education","lineage":["https://openalex.org/I158333966"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Gheorghe Sebestyen","raw_affiliation_strings":["Technical University of Cluj-Napoca,Cluj-Napoca,Romania","Technical University of Cluj-Napoca, Cluj-Napoca, Romania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Cluj-Napoca,Cluj-Napoca,Romania","institution_ids":["https://openalex.org/I158333966"]},{"raw_affiliation_string":"Technical University of Cluj-Napoca, Cluj-Napoca, Romania","institution_ids":["https://openalex.org/I158333966"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I158333966"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23559044,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":null,"first_page":"211","last_page":"218"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8768926858901978},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8597999215126038},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.776697039604187},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.62925124168396},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5451157093048096},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5024914741516113},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4412177801132202},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4292590618133545},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.34964680671691895},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.32872575521469116}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8768926858901978},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8597999215126038},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.776697039604187},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.62925124168396},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5451157093048096},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5024914741516113},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4412177801132202},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4292590618133545},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.34964680671691895},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.32872575521469116}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccp60212.2023.10398680","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iccp60212.2023.10398680","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 19th International Conference on Intelligent Computer Communication and Processing (ICCP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W135165129","https://openalex.org/W192227941","https://openalex.org/W1545528966","https://openalex.org/W1571989395","https://openalex.org/W1591082683","https://openalex.org/W1966948031","https://openalex.org/W1987684126","https://openalex.org/W2008462406","https://openalex.org/W2013973985","https://openalex.org/W2018257180","https://openalex.org/W2041836310","https://openalex.org/W2073457560","https://openalex.org/W2095705004","https://openalex.org/W2120900307","https://openalex.org/W2123840312","https://openalex.org/W2476429474","https://openalex.org/W2548971154","https://openalex.org/W2557513839","https://openalex.org/W2625570400","https://openalex.org/W2734713605","https://openalex.org/W2744520801","https://openalex.org/W2795033129","https://openalex.org/W3036930808","https://openalex.org/W3111237076","https://openalex.org/W3111533025","https://openalex.org/W3197055094","https://openalex.org/W4297688993","https://openalex.org/W4300687693","https://openalex.org/W6674330103","https://openalex.org/W6786854854"],"related_works":["https://openalex.org/W1995118279","https://openalex.org/W4240624848","https://openalex.org/W2439951656","https://openalex.org/W2377509977","https://openalex.org/W1573526548","https://openalex.org/W1998188341","https://openalex.org/W4360982091","https://openalex.org/W3176864451","https://openalex.org/W2053632570","https://openalex.org/W3211525895"],"abstract_inverted_index":{"Machine":[0],"learning":[1,63,82],"methods":[2],"are":[3,20,28],"commonly":[4],"used":[5],"for":[6,30],"malware":[7,32,40,59],"detection":[8,33,41,60,72,111],"to":[9,11,55,109,115],"respond":[10],"the":[12,85],"ever-increasing":[13],"number":[14],"of":[15],"malicious":[16],"programs.":[17],"Detection":[18],"models":[19,83,98,112],"usually":[21],"trained":[22],"on":[23,44,79,87],"full":[24],"execution":[25],"logs":[26],"and":[27,84,99],"unsuitable":[29],"real-time":[31,39,58],"during":[34],"execution.":[35],"We":[36,66,92,104],"build":[37],"a":[38,88,106],"system":[42,69,117],"based":[43,78],"process":[45,51],"behavior":[46],"combined":[47],"with":[48],"artifacts":[49],"from":[50],"memory":[52],"that":[53,57,113],"aims":[54,114],"show":[56,93],"using":[61],"machine":[62,81],"is":[64],"feasible.":[65],"optimize":[67],"our":[68,97],"by":[70],"separating":[71],"into":[73],"two":[74],"stages,":[75],"one":[76],"stage":[77],"classical":[80],"other":[86],"deep":[89],"neural":[90],"network.":[91],"how":[94,100],"we":[95,101],"train":[96],"evaluate":[102,110],"them.":[103],"introduce":[105],"novel":[107],"way":[108],"improve":[116],"performance.":[118]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}