{"id":"https://openalex.org/W4360996432","doi":"https://doi.org/10.1109/icct56141.2022.10073202","title":"Malware Classification Based on GAF Visualization of Dynamic API Call Sequences","display_name":"Malware Classification Based on GAF Visualization of Dynamic API Call Sequences","publication_year":2022,"publication_date":"2022-11-11","ids":{"openalex":"https://openalex.org/W4360996432","doi":"https://doi.org/10.1109/icct56141.2022.10073202"},"language":"en","primary_location":{"id":"doi:10.1109/icct56141.2022.10073202","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icct56141.2022.10073202","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 22nd International Conference on Communication Technology (ICCT)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100320773","display_name":"Hongmei Zhang","orcid":"https://orcid.org/0000-0002-2254-205X"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongmei Zhang","raw_affiliation_strings":["School of Information and Communication, Guilin University of Electronic Technology,Guilin,China","Peng Cheng Laboratory, Shenzhen, China","School of Information and Communication, Guilin University of Electronic Technology, Guilin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Communication, Guilin University of Electronic Technology,Guilin,China","institution_ids":["https://openalex.org/I5343935"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"School of Information and Communication, Guilin University of Electronic Technology, Guilin, China","institution_ids":["https://openalex.org/I5343935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085752164","display_name":"Xiaoqian Yun","orcid":null},"institutions":[{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqian Yun","raw_affiliation_strings":["School of Information and Communication, Guilin University of Electronic Technology,Guilin,China","School of Information and Communication, Guilin University of Electronic Technology, Guilin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Communication, Guilin University of Electronic Technology,Guilin,China","institution_ids":["https://openalex.org/I5343935"]},{"raw_affiliation_string":"School of Information and Communication, Guilin University of Electronic Technology, Guilin, China","institution_ids":["https://openalex.org/I5343935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100556550","display_name":"Xiaofang Deng","orcid":null},"institutions":[{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaofang Deng","raw_affiliation_strings":["School of Information and Communication, Guilin University of Electronic Technology,Guilin,China","School of Information and Communication, Guilin University of Electronic Technology, Guilin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Communication, Guilin University of Electronic Technology,Guilin,China","institution_ids":["https://openalex.org/I5343935"]},{"raw_affiliation_string":"School of Information and Communication, Guilin University of Electronic Technology, Guilin, China","institution_ids":["https://openalex.org/I5343935"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017352161","display_name":"Xiaoxiong Zhong","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoxiong Zhong","raw_affiliation_strings":["Peng Cheng Laboratory,Shenzhen,China","Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory,Shenzhen,China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1873","last_page":"1877"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8656927347183228},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8529881238937378},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.6736442446708679},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6200499534606934},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.590129554271698},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4784308075904846},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4728280007839203},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4554644525051117},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4499531388282776},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4450223743915558},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4353083372116089},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.40253132581710815},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.13123616576194763},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07497501373291016}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8656927347183228},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8529881238937378},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.6736442446708679},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6200499534606934},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.590129554271698},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4784308075904846},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4728280007839203},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4554644525051117},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4499531388282776},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4450223743915558},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4353083372116089},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.40253132581710815},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13123616576194763},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07497501373291016},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icct56141.2022.10073202","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icct56141.2022.10073202","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 22nd International Conference on Communication Technology (ICCT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1996103765","display_name":null,"funder_award_id":"2020GXNSFDA238001","funder_id":"https://openalex.org/F4320322768","funder_display_name":"Natural Science Foundation of Guangxi Province"},{"id":"https://openalex.org/G6067781804","display_name":null,"funder_award_id":"GXKL06200104,CRKL200101","funder_id":"https://openalex.org/F4320323266","funder_display_name":"Guilin University of Electronic Technology"}],"funders":[{"id":"https://openalex.org/F4320322768","display_name":"Natural Science Foundation of Guangxi Province","ror":null},{"id":"https://openalex.org/F4320323266","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42"},{"id":"https://openalex.org/F4320335669","display_name":"Key Laboratory of System Control and Information Processing","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W2898457271","https://openalex.org/W2901358399","https://openalex.org/W3082575476","https://openalex.org/W3216338701","https://openalex.org/W4210756680","https://openalex.org/W4221112654","https://openalex.org/W4223953496","https://openalex.org/W4238979297","https://openalex.org/W4280584790","https://openalex.org/W4285357480"],"related_works":["https://openalex.org/W2439951656","https://openalex.org/W1998188341","https://openalex.org/W1573526548","https://openalex.org/W4360982091","https://openalex.org/W3176864451","https://openalex.org/W2053632570","https://openalex.org/W2187910102","https://openalex.org/W4389341938","https://openalex.org/W2128507946","https://openalex.org/W4254552916"],"abstract_inverted_index":{"Due":[0],"to":[1,40,42,60,86],"the":[2,11,26,43,62,75,93,100,105,110,123,127,138,142,156,165],"constant":[3],"updates":[4],"of":[5,14,45,54,95,103,109,126,141,168],"malware":[6,15,55],"and":[7,10,81,137,162],"its":[8,117],"variants":[9],"continuous":[12],"development":[13],"obfuscation":[16],"techniques.":[17],"Malware":[18],"intrusions":[19],"targeting":[20],"Windows":[21,63],"hosts":[22],"are":[23],"also":[24,160],"on":[25,74],"rise.":[27],"Traditional":[28],"static":[29],"analysis":[30],"methods":[31],"such":[32],"as":[33],"signature":[34],"matching":[35],"mechanisms":[36],"have":[37],"been":[38],"difficult":[39],"adapt":[41],"detection":[44,52],"new":[46],"malware.":[47,88,169],"Therefore,":[48],"a":[49,83],"novel":[50],"visual":[51],"method":[53,158],"is":[56,114,133,147,159],"proposed":[57,97,157],"for":[58,164],"first-time":[59],"convert":[61],"API":[64,111],"call":[65,112],"sequence":[66,113],"with":[67,116],"sequential":[68],"nature":[69],"into":[70],"feature":[71],"images":[72],"based":[73],"Gramian":[76],"Angular":[77],"Field":[78],"(GAF)":[79],"idea,":[80],"train":[82],"neural":[84],"network":[85],"identify":[87],"The":[89],"experimental":[90],"results":[91],"demonstrate":[92],"effectiveness":[94],"our":[96,152],"method.":[98],"For":[99],"binary":[101],"classification":[102,124,139,167],"malware,":[104],"GAF":[106,121],"visualization":[107],"image":[108],"compared":[115],"original":[118],"sequence.":[119],"After":[120],"visualization,":[122],"accuracy":[125,140],"classic":[128],"machine":[129],"learning":[130,144],"model":[131,145],"MLP":[132],"improved":[134,148],"by":[135,149],"9.64%,":[136],"deep":[143],"CNN":[146],"4.82%.":[150],"Furthermore,":[151],"experiments":[153],"show":[154],"that":[155],"feasible":[161],"effective":[163],"multi-class":[166]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}