{"id":"https://openalex.org/W4409560755","doi":"https://doi.org/10.1109/jiot.2025.3561847","title":"MalAE: A Feature-Optimized and Autoencoder Ensemble-Based Method for IoT Malware Classification","display_name":"MalAE: A Feature-Optimized and Autoencoder Ensemble-Based Method for IoT Malware Classification","publication_year":2025,"publication_date":"2025-04-17","ids":{"openalex":"https://openalex.org/W4409560755","doi":"https://doi.org/10.1109/jiot.2025.3561847"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2025.3561847","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3561847","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113392062","display_name":"Chengrun He","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127487","display_name":"Vision Technology (United States)","ror":"https://ror.org/03gmxkp43","country_code":"US","type":"company","lineage":["https://openalex.org/I4210127487"]},{"id":"https://openalex.org/I4401727007","display_name":"Hikvision (China)","ror":"https://ror.org/02jzypx27","country_code":null,"type":"company","lineage":["https://openalex.org/I4401727007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chengrun He","raw_affiliation_strings":["Network and Information Security Laboratory, Hangzhou Hikvision Digital Technology Company Ltd., Hangzhou, China","Hangzhou Hikvision Digital Technology Co., Ltd, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Network and Information Security Laboratory, Hangzhou Hikvision Digital Technology Company Ltd., Hangzhou, China","institution_ids":["https://openalex.org/I4210127487"]},{"raw_affiliation_string":"Hangzhou Hikvision Digital Technology Co., Ltd, Hangzhou, China","institution_ids":["https://openalex.org/I4401727007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071285652","display_name":"Honghui Fan","orcid":"https://orcid.org/0009-0009-0868-1684"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Honghui Fan","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-0868-1684","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100411650","display_name":"Lihua Yin","orcid":"https://orcid.org/0000-0001-8829-4442"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8829-4442","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048417676","display_name":"Haonan Yan","orcid":"https://orcid.org/0000-0002-1784-6091"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haonan Yan","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0002-1784-6091","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101981612","display_name":"Xi Luo","orcid":"https://orcid.org/0000-0002-4677-9430"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Luo","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024453724","display_name":"Hui Li","orcid":"https://orcid.org/0000-0001-8310-7169"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Li","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0001-8310-7169","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5117306112","display_name":"Bin Wang","orcid":"https://orcid.org/0000-0002-7835-7160"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Wang","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","Xidian University, Xi’an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7073,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.89349976,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"12","issue":"14","first_page":"27181","last_page":"27192"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9537000060081482,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8698209524154663},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.8457396030426025},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7725899815559387},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5810129046440125},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5250506401062012},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5174013376235962},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5138988494873047},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.457057923078537},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3783666789531708},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3693639636039734},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2372068166732788},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.15290796756744385}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8698209524154663},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.8457396030426025},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7725899815559387},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5810129046440125},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5250506401062012},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5174013376235962},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5138988494873047},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.457057923078537},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3783666789531708},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3693639636039734},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2372068166732788},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.15290796756744385},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3561847","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3561847","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1411998112","display_name":null,"funder_award_id":"Nos. 92167203","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2672657738","display_name":null,"funder_award_id":"62402373","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2946819813","display_name":null,"funder_award_id":"Nos. 2022YFB3104100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G3366869832","display_name":null,"funder_award_id":"Nos. 62402373","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7870043529","display_name":null,"funder_award_id":"2024M764269","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2010065958","https://openalex.org/W2028727337","https://openalex.org/W2154529672","https://openalex.org/W2155320991","https://openalex.org/W2334791991","https://openalex.org/W2532962075","https://openalex.org/W2749008552","https://openalex.org/W2962802821","https://openalex.org/W2963197901","https://openalex.org/W3006334803","https://openalex.org/W3175941285","https://openalex.org/W3190752170","https://openalex.org/W3196064684","https://openalex.org/W4239799938","https://openalex.org/W4244238212","https://openalex.org/W4296068317","https://openalex.org/W4312056312","https://openalex.org/W4312236745","https://openalex.org/W4313594499","https://openalex.org/W4390820954","https://openalex.org/W4391317433","https://openalex.org/W4392121297","https://openalex.org/W4402593613","https://openalex.org/W4404737451","https://openalex.org/W6607259140","https://openalex.org/W6732855312","https://openalex.org/W6745899033","https://openalex.org/W6750318962","https://openalex.org/W6795040997","https://openalex.org/W6804839514","https://openalex.org/W6858429443","https://openalex.org/W6866549524"],"related_works":["https://openalex.org/W3013693939","https://openalex.org/W2566616303","https://openalex.org/W2159052453","https://openalex.org/W3131327266","https://openalex.org/W2734887215","https://openalex.org/W2803255133","https://openalex.org/W4297051394","https://openalex.org/W2752972570","https://openalex.org/W4386815338","https://openalex.org/W2145836866"],"abstract_inverted_index":{"In":[0,99],"the":[1,4,9,77,173,190],"landscape":[2],"of":[3,6,16,59,66,137,176,212],"Internet":[5],"Things":[7],"(IoT),":[8],"rapid":[10,174],"evolution":[11],"and":[12,23,61,131,143,151,171],"diverse":[13],"obfuscation":[14],"tactics":[15],"malware":[17,108],"render":[18],"it":[19,42],"challenging":[20,43],"to":[21,29,44,82,87,122,202],"detect":[22],"identify":[24],"effectively,":[25],"posing":[26],"significant":[27],"threats":[28],"network":[30],"security.":[31],"Signature":[32],"or":[33,63,80],"heuristic":[34],"methods":[35,70],"rely":[36],"on":[37,74,182],"fixed":[38],"feature":[39,152,192],"recognition,":[40],"making":[41],"handle":[45],"new":[46],"variants.":[47,134],"Recent":[48],"research":[49],"has":[50],"proposed":[51],"deep":[52],"learning":[53],"techniques":[54],"that":[55,187],"utilize":[56],"static":[57],"analysis":[58,65],"bytes":[60],"images":[62],"dynamic":[64],"APIs.":[67],"However,":[68],"these":[69],"are":[71],"effective":[72],"only":[73],"samples":[75],"from":[76,148],"same":[78],"platform":[79],"lead":[81],"a":[83,104,116,158],"dimensional":[84],"explosion":[85],"due":[86],"excessive":[88],"irrelevant":[89],"obfuscation,":[90],"rendering":[91],"them":[92],"inadequate":[93],"for":[94],"managing":[95],"complex":[96,169],"cross-platform":[97,107,144,178],"malware.":[98],"this":[100],"work,":[101],"we":[102],"propose":[103],"novel":[105],"lightweight":[106],"classification":[109,175],"system":[110,114],"called":[111],"MalAE.":[112],"This":[113,162],"employs":[115],"global-local":[117],"particle":[118],"swarm":[119],"optimization":[120],"algorithm":[121],"mine":[123],"frequent":[124],"features,":[125],"adaptively":[126],"identifying":[127],"distinct":[128],"family":[129],"characteristics":[130],"efficiently":[132],"recognizing":[133],"An":[135],"ensemble":[136],"autoencoders":[138],"integrates":[139],"comprehensive":[140],"file":[141],"features":[142,147],"basic":[145],"block":[146],"various":[149],"perspectives":[150],"spaces,":[153],"compressing":[154],"high-dimensional":[155],"data":[156],"into":[157],"low-dimensional":[159],"latent":[160],"space.":[161],"approach":[163],"preserves":[164],"essential":[165],"information,":[166],"captures":[167],"nonlinear":[168],"relationships,":[170],"facilitates":[172],"intricate":[177],"samples.":[179],"Evaluations":[180],"conducted":[181],"two":[183],"different":[184],"datasets":[185],"demonstrate":[186],"MalAE":[188,205],"reduces":[189],"original":[191],"dimensions":[193],"by":[194],"approximately":[195],"70%":[196],"while":[197],"also":[198],"enhancing":[199],"accuracy.":[200],"Compared":[201],"state-of-the-art":[203],"methods,":[204],"achieves":[206],"superior":[207],"results,":[208],"attaining":[209],"an":[210],"accuracy":[211],"97.72%.":[213]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}