{"id":"https://openalex.org/W2734713605","doi":"https://doi.org/10.1109/ijcnn.2017.7966340","title":"Empowering convolutional networks for malware classification and analysis","display_name":"Empowering convolutional networks for malware classification and analysis","publication_year":2017,"publication_date":"2017-05-01","ids":{"openalex":"https://openalex.org/W2734713605","doi":"https://doi.org/10.1109/ijcnn.2017.7966340","mag":"2734713605"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn.2017.7966340","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn.2017.7966340","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080832826","display_name":"Bojan Kolosnjaji","orcid":null},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Bojan Kolosnjaji","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062954680","display_name":"Ghadir Eraisha","orcid":null},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ghadir Eraisha","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037134897","display_name":"George D. Webster","orcid":"https://orcid.org/0000-0002-1591-8952"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"George Webster","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065154871","display_name":"Apostolis Zarras","orcid":"https://orcid.org/0000-0002-8480-6989"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Apostolis Zarras","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073408463","display_name":"Claudia Eckert","orcid":"https://orcid.org/0000-0002-2201-3828"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Claudia Eckert","raw_affiliation_strings":["Technical University of Munich","Fraunhofer AISEC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]},{"raw_affiliation_string":"Fraunhofer AISEC","institution_ids":["https://openalex.org/I4210136922"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.3046,"has_fulltext":false,"cited_by_count":81,"citation_normalized_percentile":{"value":0.97887224,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"3838","last_page":"3845"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8880419135093689},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8625868558883667},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7089321613311768},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6345641016960144},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6201137900352478},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6111482977867126},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5173220634460449},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.47891151905059814},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4773193299770355},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.415335088968277},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37618306279182434}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8880419135093689},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8625868558883667},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7089321613311768},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6345641016960144},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6201137900352478},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6111482977867126},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5173220634460449},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.47891151905059814},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4773193299770355},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.415335088968277},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37618306279182434},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/ijcnn.2017.7966340","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn.2017.7966340","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},{"id":"pmh:oai:cris.maastrichtuniversity.nl:openaire_cris_publications/3d416528-7795-4660-8abd-cddf84f4cc95","is_oa":false,"landing_page_url":"https://cris.maastrichtuniversity.nl/en/publications/3d416528-7795-4660-8abd-cddf84f4cc95","pdf_url":null,"source":{"id":"https://openalex.org/S4306402616","display_name":"Research Publications (Maastricht University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I34352273","host_organization_name":"Maastricht University","host_organization_lineage":["https://openalex.org/I34352273"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Kolosnjaji, B, Eraisha, G, Webster, G, Zarras, A & Eckert, C 2017, Empowering Convolutional Networks for Malware Classification and Analysis. in Proceedings of the 30th International Joint Conference on Neural Networks (IJCNN). https://doi.org/10.1109/IJCNN.2017.7966340","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:fraunhofer.de:N-502622","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-502622.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer AISEC","raw_type":"Conference Paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/401204","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/401204","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.5099999904632568}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W94487276","https://openalex.org/W1533861849","https://openalex.org/W1538131130","https://openalex.org/W1545528966","https://openalex.org/W1673310716","https://openalex.org/W1677182931","https://openalex.org/W1832693441","https://openalex.org/W1893133781","https://openalex.org/W1910686388","https://openalex.org/W2003704128","https://openalex.org/W2057079516","https://openalex.org/W2072698166","https://openalex.org/W2103496339","https://openalex.org/W2138644293","https://openalex.org/W2144112223","https://openalex.org/W2163605009","https://openalex.org/W2187089797","https://openalex.org/W2234884273","https://openalex.org/W2402144811","https://openalex.org/W2493100395","https://openalex.org/W2510021091","https://openalex.org/W2557513839","https://openalex.org/W2953384591","https://openalex.org/W2962851944","https://openalex.org/W3141595720","https://openalex.org/W4231109964","https://openalex.org/W6603845587","https://openalex.org/W6631943919","https://openalex.org/W6632100814","https://openalex.org/W6637131181","https://openalex.org/W6639864006","https://openalex.org/W6684191040","https://openalex.org/W6713134421"],"related_works":["https://openalex.org/W2350278424","https://openalex.org/W2071432835","https://openalex.org/W2097492617","https://openalex.org/W4234371507","https://openalex.org/W4299534542","https://openalex.org/W1628824497","https://openalex.org/W4239401009","https://openalex.org/W2053441600","https://openalex.org/W1995118279","https://openalex.org/W4240624848"],"abstract_inverted_index":{"Performing":[0],"large-scale":[1,47],"malware":[2,11,19,85,92],"classification":[3,69,129],"is":[4,21,94],"increasingly":[5],"becoming":[6],"a":[7,56,168,182],"critical":[8],"step":[9],"in":[10,61,116,131,151,238,242],"analytics":[12],"as":[13,36,135,220,229],"the":[14,79,88,105,111,147,152,159,201,204,243],"number":[15],"and":[16,49,68,138,175,225,235],"variety":[17],"of":[18,46,58,70,91,113,118,154,162,173,190,192,197,203,240],"samples":[20],"rapidly":[22],"growing.":[23],"Statistical":[24],"machine":[25,63],"learning":[26,64],"constitutes":[27],"an":[28,74],"appealing":[29],"method":[30,76],"to":[31,42,96,104,157],"cope":[32],"with":[33,87,194],"this":[34,143],"increase":[35],"it":[37],"can":[38,109,125],"use":[39],"mathematical":[40],"tools":[41],"extract":[43],"information":[44],"out":[45],"datasets":[48],"produce":[50],"interpretable":[51],"models.":[52],"This":[53,179],"has":[54],"motivated":[55],"surge":[57],"scientific":[59],"work":[60],"developing":[62],"methods":[65,115],"for":[66,77,83],"detection":[67],"malicious":[71,164],"executables.":[72],"However,":[73],"optimal":[75],"extracting":[78],"most":[80],"informative":[81],"features":[82,198],"different":[84],"families,":[86],"final":[89],"goal":[90],"classification,":[93],"yet":[95],"be":[97],"found.":[98],"Fortunately,":[99],"neural":[100,123,155,169,177],"networks":[101,124,156],"have":[102],"evolved":[103],"state":[106],"that":[107,171,187,213],"they":[108],"surpass":[110],"limitations":[112],"other":[114],"terms":[117],"hierarchical":[119,183],"feature":[120,184],"extraction.":[121],"Consequently,":[122],"now":[126],"offer":[127],"superior":[128],"accuracy":[130],"many":[132],"domains":[133],"such":[134,219],"computer":[136],"vision":[137],"natural":[139],"language":[140],"processing.":[141],"In":[142],"paper,":[144],"we":[145,230],"transfer":[146],"performance":[148],"improvements":[149],"achieved":[150],"area":[153],"model":[158],"execution":[160],"sequences":[161],"disassembled":[163],"binaries.":[165],"We":[166],"implement":[167],"network":[170],"consists":[172],"convolutional":[174],"feedforward":[176],"constructs.":[178],"architecture":[180],"embodies":[181],"extraction":[185],"approach":[186,215],"combines":[188],"convolution":[189],"n-grams":[191],"instructions":[193],"plain":[195],"vectorization":[196],"derived":[199],"from":[200],"headers":[202],"Portable":[205],"Executable":[206],"(PE)":[207],"files.":[208],"Our":[209],"evaluation":[210],"results":[211],"demonstrate":[212],"our":[214],"outperforms":[216],"baseline":[217],"methods,":[218],"simple":[221],"Feedforward":[222],"Neural":[223],"Networks":[224],"Support":[226],"Vector":[227],"Machines,":[228],"achieve":[231],"93%":[232],"on":[233],"precision":[234],"recall,":[236],"even":[237],"case":[239],"obfuscations":[241],"data.":[244]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":19},{"year":2020,"cited_by_count":14},{"year":2019,"cited_by_count":15},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":3}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}