{"id":"https://openalex.org/W2516747399","doi":"https://doi.org/10.1109/iscas.2016.7527492","title":"Online malware defense using attack behavior model","display_name":"Online malware defense using attack behavior model","publication_year":2016,"publication_date":"2016-05-01","ids":{"openalex":"https://openalex.org/W2516747399","doi":"https://doi.org/10.1109/iscas.2016.7527492","mag":"2516747399"},"language":"en","primary_location":{"id":"doi:10.1109/iscas.2016.7527492","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscas.2016.7527492","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE International Symposium on Circuits and Systems (ISCAS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032500551","display_name":"Sanjeev Das","orcid":"https://orcid.org/0000-0002-2157-0155"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Sanjeev Das","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101552419","display_name":"Hao Xiao","orcid":"https://orcid.org/0000-0002-9368-1495"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Hao Xiao","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061515087","display_name":"Wei Zhang","orcid":"https://orcid.org/0000-0002-7622-6714"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Wei Zhang","raw_affiliation_strings":["Hong Kong University of Science and Technology, Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1322","last_page":"1325"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9335061311721802},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8671984076499939},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.6198996305465698},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5989441275596619},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5156632661819458},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4122329652309418},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.30352091789245605}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9335061311721802},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8671984076499939},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.6198996305465698},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5989441275596619},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5156632661819458},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4122329652309418},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30352091789245605},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iscas.2016.7527492","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscas.2016.7527492","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE International Symposium on Circuits and Systems (ISCAS)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-80573","is_oa":false,"landing_page_url":"http://gateway.isiknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=LinksAMR&SrcApp=PARTNER_APP&DestLinkType=FullRecord&DestApp=WOS&KeyUT=000390094701114","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1641762327","https://openalex.org/W1910686388","https://openalex.org/W1989445634","https://openalex.org/W2045002320","https://openalex.org/W2066220442","https://openalex.org/W2102970979","https://openalex.org/W2137365926","https://openalex.org/W2140606869","https://openalex.org/W2159319976","https://openalex.org/W2166844173","https://openalex.org/W2191468669","https://openalex.org/W3136767761","https://openalex.org/W6637110787","https://openalex.org/W6639864006","https://openalex.org/W6667106371","https://openalex.org/W6687504306"],"related_works":["https://openalex.org/W2783112941","https://openalex.org/W4387298227","https://openalex.org/W2526398307","https://openalex.org/W2439951656","https://openalex.org/W2470029541","https://openalex.org/W4387065217","https://openalex.org/W2377509977","https://openalex.org/W1573526548","https://openalex.org/W1998188341","https://openalex.org/W4368275542"],"abstract_inverted_index":{"Malware":[0],"detection":[1,32,63,128],"is":[2],"one":[3],"central":[4],"topic":[5],"in":[6,47,65,78,120],"cybersecurity,":[7],"which":[8],"ideally":[9],"requires":[10],"an":[11],"accurate,":[12],"efficient":[13],"and":[14,94,132,135],"robust":[15],"(to":[16],"malware":[17,31,46,92,107,143],"variants)":[18],"solution.":[19],"In":[20,36],"this":[21],"work,":[22],"we":[23,40,59],"propose":[24],"a":[25,61,70,125],"hardwareassisted":[26],"architecture":[27,123],"to":[28,67,115],"perform":[29],"online":[30],"with":[33,112,129],"two":[34],"phases.":[35],"the":[37,42,48,56,74,79,113],"offline":[38],"phase,":[39,58],"learn":[41],"attack":[43],"model":[44],"of":[45,50,89,109],"form":[49],"Deterministic":[51],"Finite":[52],"Automaton":[53],"(DFA).":[54],"During":[55],"runtime":[57],"implement":[60],"DFA-based":[62,103],"approach":[64,104],"hardware":[66],"check":[68],"whether":[69],"program's":[71],"execution":[72],"contains":[73],"malicious":[75],"behavior":[76],"specified":[77],"DFA.":[80],"We":[81],"evaluate":[82],"our":[83,102,122],"method":[84],"using":[85,144],"real":[86,126],"world":[87],"data":[88],"168":[90],"Linux":[91],"samples":[93],"370":[95],"benign":[96],"applications.":[97],"The":[98],"results":[99],"show":[100],"that":[101],"can":[105],"recognize":[106],"variants":[108],"same":[110],"family":[111],"potential":[114],"detect":[116],"zero-day":[117],"attacks.":[118],"Implemented":[119],"hardware,":[121],"offers":[124],"time":[127],"low":[130],"performance":[131],"resource":[133],"overhead,":[134],"more":[136],"importantly,":[137],"it":[138],"cannot":[139],"be":[140],"bypassed":[141],"by":[142],"sophisticated":[145],"evasion":[146],"techniques.":[147]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}