{"id":"https://openalex.org/W4377969881","doi":"https://doi.org/10.1109/isqed57927.2023.10129348","title":"Image-Based Zero-Day Malware Detection in IoMT Devices: A Hybrid AI-Enabled Method","display_name":"Image-Based Zero-Day Malware Detection in IoMT Devices: A Hybrid AI-Enabled Method","publication_year":2023,"publication_date":"2023-04-05","ids":{"openalex":"https://openalex.org/W4377969881","doi":"https://doi.org/10.1109/isqed57927.2023.10129348"},"language":"en","primary_location":{"id":"doi:10.1109/isqed57927.2023.10129348","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isqed57927.2023.10129348","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 24th International Symposium on Quality Electronic Design (ISQED)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072969885","display_name":"Zhangying He","orcid":"https://orcid.org/0000-0002-5072-2955"},"institutions":[{"id":"https://openalex.org/I59897056","display_name":"California State University, Long Beach","ror":"https://ror.org/0080fxk18","country_code":"US","type":"education","lineage":["https://openalex.org/I59897056"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhangying He","raw_affiliation_strings":["California State University,Department of Computer Engineering and Computer Science,Long Beach,CA,USA","Department of Computer Engineering and Computer Science, California State University, Long Beach, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"California State University,Department of Computer Engineering and Computer Science,Long Beach,CA,USA","institution_ids":["https://openalex.org/I59897056"]},{"raw_affiliation_string":"Department of Computer Engineering and Computer Science, California State University, Long Beach, CA, USA","institution_ids":["https://openalex.org/I59897056"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080844858","display_name":"Hossein Sayadi","orcid":"https://orcid.org/0000-0001-6423-0145"},"institutions":[{"id":"https://openalex.org/I59897056","display_name":"California State University, Long Beach","ror":"https://ror.org/0080fxk18","country_code":"US","type":"education","lineage":["https://openalex.org/I59897056"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hossein Sayadi","raw_affiliation_strings":["California State University,Department of Computer Engineering and Computer Science,Long Beach,CA,USA","Department of Computer Engineering and Computer Science, California State University, Long Beach, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"California State University,Department of Computer Engineering and Computer Science,Long Beach,CA,USA","institution_ids":["https://openalex.org/I59897056"]},{"raw_affiliation_string":"Department of Computer Engineering and Computer Science, California State University, Long Beach, CA, USA","institution_ids":["https://openalex.org/I59897056"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I59897056"],"apc_list":null,"apc_paid":null,"fwci":6.4382,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":{"value":0.9809379,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7955673933029175},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7039055824279785},{"id":"https://openalex.org/keywords/zero","display_name":"Zero (linguistics)","score":0.5771316289901733},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4259335398674011},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.40342777967453003},{"id":"https://openalex.org/keywords/computer-graphics","display_name":"Computer graphics (images)","score":0.3979404866695404},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.38004574179649353},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23783481121063232}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7955673933029175},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7039055824279785},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.5771316289901733},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4259335398674011},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40342777967453003},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.3979404866695404},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.38004574179649353},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23783481121063232},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isqed57927.2023.10129348","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isqed57927.2023.10129348","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 24th International Symposium on Quality Electronic Design (ISQED)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7400000095367432,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2034053858","https://openalex.org/W2065890363","https://openalex.org/W2166844173","https://openalex.org/W2194775991","https://openalex.org/W2594364040","https://openalex.org/W2732916693","https://openalex.org/W2902209387","https://openalex.org/W2944830571","https://openalex.org/W2945027786","https://openalex.org/W2945097383","https://openalex.org/W2950774332","https://openalex.org/W2960362180","https://openalex.org/W2962802821","https://openalex.org/W2964043796","https://openalex.org/W2996143878","https://openalex.org/W3046195620","https://openalex.org/W3083668898","https://openalex.org/W3083702481","https://openalex.org/W3161833296","https://openalex.org/W3206885183","https://openalex.org/W4210702679","https://openalex.org/W4256383029","https://openalex.org/W4281725204","https://openalex.org/W4297337545","https://openalex.org/W4312476421","https://openalex.org/W6692846177"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W3152891574","https://openalex.org/W4316881845","https://openalex.org/W2975527072"],"abstract_inverted_index":{"Healthcare":[0],"systems":[1],"have":[2],"recently":[3],"utilized":[4],"the":[5,19,31,55,58,63,84,89,108,124,181,227,280,284],"Internet":[6],"of":[7,21,27,57,66,91,110,127,138,195,282,301],"Medical":[8],"Things":[9],"(IoMT)":[10],"to":[11,30,50,77,97,223,249,278],"assist":[12],"intelligent":[13],"data":[14,53,121,210,247],"collection":[15],"and":[16,35,54,130,154,162,216,225,272,320,328],"decision-making.":[17],"However,":[18],"volume":[20],"malicious":[22],"threats,":[23],"particularly":[24],"new":[25,120],"variants":[26],"malware":[28,82,117,141,171,184,237,293],"attacks":[29],"connected":[32,37],"medical":[33],"devices":[34,129],"their":[36],"system,":[38],"has":[39,75],"risen":[40],"significantly":[41],"in":[42,123,173,317],"recent":[43],"years,":[44],"which":[45],"poses":[46],"a":[47,144,152,193,219,256,276,298],"critical":[48],"threat":[49],"patients\u2019":[51],"confidential":[52],"safety":[56],"healthcare":[59],"systems.":[60],"To":[61],"address":[62],"high":[64,145],"complexity":[65],"conventional":[67],"software-based":[68],"detection":[69,118,146,172,294,315],"techniques,":[70],"Hardware-supported":[71],"Malware":[72],"Detection":[73],"(HMD)":[74],"proved":[76],"be":[78],"efficient":[79,197],"for":[80,115,167,189,235,289],"detecting":[81,139],"at":[83,186,295],"processors\u2019":[85],"micro-architecture":[86],"level":[87],"with":[88,143,260,322],"aid":[90],"Machine":[92],"Learning":[93,161,165],"(ML)":[94],"techniques":[95],"applied":[96],"Hardware":[98],"Performance":[99],"Counter":[100],"(HPC)":[101],"data.":[102,204],"In":[103,148],"this":[104],"work,":[105],"we":[106,150],"examine":[107],"suitability":[109],"various":[111,245],"standard":[112],"ML":[113],"classifiers":[114],"zero-day":[116,170,292],"on":[119,159,201,244],"streams":[122],"real-world":[125],"operation":[126],"IoMT":[128,174],"demonstrate":[131,307],"that":[132,308],"such":[133],"methods":[134],"are":[135,242],"not":[136],"capable":[137],"unknown":[140,236],"signatures":[142],"rate.":[147,332],"response,":[149],"propose":[151],"hybrid":[153],"adaptive":[155],"image-based":[156],"framework":[157],"based":[158,232],"Deep":[160,163,228],"Reinforcement":[164],"(DRL)":[166],"online":[168],"hardware-assisted":[169],"devices.":[175],"Our":[176],"proposed":[177,310],"method":[178,312],"dynamically":[179],"selects":[180],"best":[182],"DNN-based":[183],"detector":[185],"run-time":[187,296],"customized":[188],"each":[190],"device":[191],"from":[192],"pool":[194],"highly":[196,290],"models":[198,241],"continuously":[199,248],"trained":[200,243,266],"all":[202],"stream":[203,246],"It":[205],"first":[206],"converts":[207],"tabular":[208],"hardware-based":[209],"(HPC":[211],"events)":[212],"into":[213],"small-size":[214],"images":[215],"then":[217],"leverages":[218],"transfer":[220],"learning":[221],"technique":[222],"retrain":[224],"enhance":[226],"Neural":[229],"Network":[230],"(DNN)":[231],"model\u2019s":[233],"performance":[234],"detection.":[238],"Multiple":[239],"DNN":[240,287],"form":[250],"an":[251,270],"inclusive":[252],"model":[253,288],"pool.":[254],"Next,":[255],"DRL-based":[257],"agent":[258],"constructed":[259],"two":[261],"Multi-Layer":[262],"Perceptrons":[263],"(MLPs)":[264],"is":[265],"(one":[267],"acts":[268,274],"as":[269,275],"Actor":[271],"another":[273],"Critic)":[277],"align":[279],"decision":[281],"selecting":[283],"most":[285],"optimal":[286],"accurate":[291],"using":[297],"limited":[299],"number":[300],"hardware":[302],"events.":[303],"The":[304],"experimental":[305],"results":[306],"our":[309],"AI-enabled":[311],"achieves":[313],"99%":[314],"rate":[316,327],"both":[318],"F1-score":[319],"AUC,":[321],"only":[323],"0.01%":[324],"false":[325,330],"positive":[326],"1%":[329],"negative":[331]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}