{"id":"https://openalex.org/W4206637870","doi":"https://doi.org/10.1109/icct52962.2021.9658113","title":"A Novel Malware Detection Approach Based on Behavioral Semantic Analysis and LSTM Model","display_name":"A Novel Malware Detection Approach Based on Behavioral Semantic Analysis and LSTM Model","publication_year":2021,"publication_date":"2021-10-13","ids":{"openalex":"https://openalex.org/W4206637870","doi":"https://doi.org/10.1109/icct52962.2021.9658113"},"language":"en","primary_location":{"id":"doi:10.1109/icct52962.2021.9658113","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icct52962.2021.9658113","pdf_url":null,"source":{"id":"https://openalex.org/S4363607878","display_name":"2021 IEEE 21st International Conference on Communication Technology (ICCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 21st International Conference on Communication Technology (ICCT)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074940197","display_name":"Weijie Han","orcid":"https://orcid.org/0000-0003-3793-8222"},"institutions":[{"id":"https://openalex.org/I4210148107","display_name":"Space Engineering University","ror":"https://ror.org/04rj1td02","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210148107"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Weijie Han","raw_affiliation_strings":["School of Space Information, Space Engineering University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Space Information, Space Engineering University, Beijing, China","institution_ids":["https://openalex.org/I4210148107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046818119","display_name":"Jingfeng Xue","orcid":"https://orcid.org/0000-0002-3087-9701"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingfeng Xue","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012850103","display_name":"Kechang Qian","orcid":null},"institutions":[{"id":"https://openalex.org/I4210148107","display_name":"Space Engineering University","ror":"https://ror.org/04rj1td02","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210148107"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kechang Qian","raw_affiliation_strings":["School of Space Information, Space Engineering University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Space Information, Space Engineering University, Beijing, China","institution_ids":["https://openalex.org/I4210148107"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5074940197"],"corresponding_institution_ids":["https://openalex.org/I4210148107"],"apc_list":null,"apc_paid":null,"fwci":0.5161,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.68166555,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"339","last_page":"343"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8158977031707764},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7510181069374084},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6035336852073669},{"id":"https://openalex.org/keywords/behavioral-analysis","display_name":"Behavioral analysis","score":0.5885723233222961},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.5675375461578369},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5326368808746338},{"id":"https://openalex.org/keywords/behavioral-pattern","display_name":"Behavioral pattern","score":0.5257930159568787},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5033823847770691},{"id":"https://openalex.org/keywords/behavioral-modeling","display_name":"Behavioral modeling","score":0.46726125478744507},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4611653685569763},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.41486412286758423},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35490477085113525},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.348366916179657},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24250510334968567},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16079413890838623}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8158977031707764},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7510181069374084},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6035336852073669},{"id":"https://openalex.org/C2989277270","wikidata":"https://www.wikidata.org/wiki/Q168338","display_name":"Behavioral analysis","level":2,"score":0.5885723233222961},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.5675375461578369},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5326368808746338},{"id":"https://openalex.org/C83804111","wikidata":"https://www.wikidata.org/wiki/Q1063558","display_name":"Behavioral pattern","level":2,"score":0.5257930159568787},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5033823847770691},{"id":"https://openalex.org/C78639753","wikidata":"https://www.wikidata.org/wiki/Q3318160","display_name":"Behavioral modeling","level":2,"score":0.46726125478744507},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4611653685569763},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.41486412286758423},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35490477085113525},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.348366916179657},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24250510334968567},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16079413890838623},{"id":"https://openalex.org/C138496976","wikidata":"https://www.wikidata.org/wiki/Q175002","display_name":"Developmental psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icct52962.2021.9658113","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icct52962.2021.9658113","pdf_url":null,"source":{"id":"https://openalex.org/S4363607878","display_name":"2021 IEEE 21st International Conference on Communication Technology (ICCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 21st International Conference on Communication Technology (ICCT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.699999988079071,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G135574341","display_name":null,"funder_award_id":"62172042","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2632775315","https://openalex.org/W2734713605","https://openalex.org/W2734718015","https://openalex.org/W2738219410","https://openalex.org/W2784097977","https://openalex.org/W2792657554","https://openalex.org/W2792716682","https://openalex.org/W2899250976","https://openalex.org/W2900633536","https://openalex.org/W2911883410","https://openalex.org/W2917661079","https://openalex.org/W2938709190","https://openalex.org/W2949755578","https://openalex.org/W2952766703","https://openalex.org/W2955992195","https://openalex.org/W2963961561","https://openalex.org/W2966906412","https://openalex.org/W2979781068","https://openalex.org/W3083528243","https://openalex.org/W3099258169","https://openalex.org/W3124610607","https://openalex.org/W3135353552","https://openalex.org/W3139497011"],"related_works":["https://openalex.org/W2152238375","https://openalex.org/W3088948716","https://openalex.org/W432535052","https://openalex.org/W4384559558","https://openalex.org/W2079267390","https://openalex.org/W2075878881","https://openalex.org/W4254057609","https://openalex.org/W2620035690","https://openalex.org/W2060700435","https://openalex.org/W2187846933"],"abstract_inverted_index":{"Malware":[0],"has":[1],"been":[2],"a":[3,14,59,78],"major":[4],"security":[5],"threat":[6],"to":[7,25,71,92,111,138],"cyberspace.":[8],"To":[9],"identify":[10],"the":[11,23,27,31,34,41,47,55,74,87,93,98,101,104,113,116,122,125,140,144,147,155,159,166,169,174,179,185,189,194],"maliciousness":[12],"of":[13,30,38,43,46,58,77,100,103,115,124,143,158,168,178,188],"program,":[15,32,60,145],"researchers":[16],"usually":[17],"extract":[18],"relevant":[19],"semantic":[20],"features":[21],"from":[22],"program":[24,94,105,117,126,148,160,180],"analyze":[26],"operational":[28],"intent":[29,76],"and":[33,65,146,172,183],"most":[35],"common":[36],"object":[37],"analysis":[39,102,123],"is":[40,151],"sequence":[42,157],"system":[44,95,106],"calls":[45,96],"program.":[48,79],"System":[49],"call":[50,107],"sequences":[51],"can":[52,164,199],"effectively":[53],"reflect":[54,73],"behavioral":[56,75],"characteristics":[57],"but":[61],"are":[62,136],"relatively":[63],"low-level":[64],"poorly":[66],"comprehensible,":[67],"making":[68],"it":[69],"difficult":[70],"intuitively":[72],"For":[80],"this":[81,83,131],"reason,":[82],"paper":[84],"further":[85],"analyzes":[86],"operation":[88,128,156,176],"behavior":[89,118,127,134,141,161,175],"types":[90,135],"corresponding":[91],"on":[97,121,193],"basis":[99],"sequences,":[108],"so":[109],"as":[110],"realize":[112],"understanding":[114],"semantics":[119,142],"based":[120,192],"sequences.":[129],"In":[130],"paper,":[132],"15":[133],"defined":[137],"characterize":[139],"feature":[149,170],"vector":[150,171],"constructed":[152,191],"by":[153],"extracting":[154],"types,":[162],"which":[163],"simplify":[165],"complexity":[167],"understand":[173],"intention":[177],"more":[181],"accurately,":[182],"finally":[184],"detection":[186],"accuracy":[187],"classifier":[190],"deep":[195],"learning":[196],"model":[197],"LSTM":[198],"reach":[200],"96.14":[201],"%.":[202]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}