{"id":"https://openalex.org/W4416961839","doi":"https://doi.org/10.1109/pst65910.2025.11268864","title":"TOM-Net: Few-Shot IoT Malware Classification Via Open-Set Aware Transductive Meta-Learning","display_name":"TOM-Net: Few-Shot IoT Malware Classification Via Open-Set Aware Transductive Meta-Learning","publication_year":2025,"publication_date":"2025-08-26","ids":{"openalex":"https://openalex.org/W4416961839","doi":"https://doi.org/10.1109/pst65910.2025.11268864"},"language":null,"primary_location":{"id":"doi:10.1109/pst65910.2025.11268864","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst65910.2025.11268864","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045155059","display_name":"Man-Ying Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I154864474","display_name":"National Taiwan University of Science and Technology","ror":"https://ror.org/00q09pe49","country_code":"TW","type":"education","lineage":["https://openalex.org/I154864474"]}],"countries":["TW"],"is_corresponding":true,"raw_author_name":"Man-Ying Chen","raw_affiliation_strings":["National Taiwan University of Science and Technology,Taipei,Taiwan"],"affiliations":[{"raw_affiliation_string":"National Taiwan University of Science and Technology,Taipei,Taiwan","institution_ids":["https://openalex.org/I154864474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113687424","display_name":"Tao Ban","orcid":null},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Tao Ban","raw_affiliation_strings":["National Institute of Information and Communications Technology,Tokyo,Japan"],"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology,Tokyo,Japan","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040420733","display_name":"Shin\u2010Ming Cheng","orcid":"https://orcid.org/0000-0002-9796-0643"},"institutions":[{"id":"https://openalex.org/I154864474","display_name":"National Taiwan University of Science and Technology","ror":"https://ror.org/00q09pe49","country_code":"TW","type":"education","lineage":["https://openalex.org/I154864474"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Shin-Ming Cheng","raw_affiliation_strings":["National Taiwan University of Science and Technology,Taipei,Taiwan"],"affiliations":[{"raw_affiliation_string":"National Taiwan University of Science and Technology,Taipei,Taiwan","institution_ids":["https://openalex.org/I154864474"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029032117","display_name":"Takeshi Takahashi","orcid":"https://orcid.org/0000-0002-6477-7770"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi Takahashi","raw_affiliation_strings":["National Institute of Information and Communications Technology,Tokyo,Japan"],"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology,Tokyo,Japan","institution_ids":["https://openalex.org/I90023481"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5045155059"],"corresponding_institution_ids":["https://openalex.org/I154864474"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.490264,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9559000134468079,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9559000134468079,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.012900000438094139,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.005799999926239252,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8669999837875366},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5115000009536743},{"id":"https://openalex.org/keywords/opcode","display_name":"Opcode","score":0.5109000205993652},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.4271000027656555},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4147999882698059},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.41440001130104065},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.3898000121116638}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8669999837875366},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8271999955177307},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6299999952316284},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5713000297546387},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5115000009536743},{"id":"https://openalex.org/C52173422","wikidata":"https://www.wikidata.org/wiki/Q766483","display_name":"Opcode","level":2,"score":0.5109000205993652},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.4271000027656555},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4147999882698059},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.41440001130104065},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.3898000121116638},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.38420000672340393},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3531000018119812},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.30399999022483826},{"id":"https://openalex.org/C15152581","wikidata":"https://www.wikidata.org/wiki/Q7833966","display_name":"Transduction (biophysics)","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.2563999891281128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/pst65910.2025.11268864","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst65910.2025.11268864","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2055472916","https://openalex.org/W2099111195","https://openalex.org/W2122111042","https://openalex.org/W2130695501","https://openalex.org/W2961099251","https://openalex.org/W2963943197","https://openalex.org/W2964105864","https://openalex.org/W2972552958","https://openalex.org/W3019875810","https://openalex.org/W3024340288","https://openalex.org/W3035654071","https://openalex.org/W3095718454","https://openalex.org/W3134731862","https://openalex.org/W3153387614","https://openalex.org/W3174621618","https://openalex.org/W3186605584","https://openalex.org/W3199224805","https://openalex.org/W4205270295","https://openalex.org/W4214911013","https://openalex.org/W4312056312","https://openalex.org/W4322730960","https://openalex.org/W4379879885","https://openalex.org/W4383503498","https://openalex.org/W4392153056","https://openalex.org/W4393033977"],"related_works":[],"abstract_inverted_index":{"The":[0],"proliferation":[1],"of":[2,4,118,139,161],"Internet":[3],"Things":[5],"(IoT)":[6],"devices":[7],"has":[8],"been":[9],"paralleled":[10],"by":[11,171],"a":[12,54,77,115],"surge":[13],"in":[14,121,142,150,168],"sophisticated":[15],"malware":[16,26,46,70,166],"threats,":[17],"posing":[18],"significant":[19],"challenges":[20],"to":[21,66,81,105],"traditional":[22],"security":[23],"mechanisms.":[24],"Conventional":[25],"classification":[27,71,116],"models":[28],"often":[29],"depend":[30],"on":[31],"extensive":[32],"labeled":[33,173],"datasets":[34],"and":[35,85,101,132],"exhibit":[36],"limited":[37,172],"generalization":[38],"capabilities,":[39],"particularly":[40],"when":[41],"encountering":[42],"novel":[43],"or":[44],"crossarchitecture":[45],"variants.":[47],"In":[48],"this":[49],"study,":[50],"we":[51],"introduce":[52],"TOMNet,":[53],"transductive":[55,98],"meta-learning":[56],"framework":[57],"that":[58,112],"synergistically":[59],"integrates":[60],"few-shot":[61],"learning":[62],"with":[63,93],"graph-based":[64],"inference":[65],"facilitate":[67],"efficient":[68],"IoT":[69,165],"under":[72,128,135],"datascarce":[73],"conditions.":[74],"TOM-Net":[75,113,162],"employs":[76],"hierarchical":[78],"GraphSAGE":[79],"encoder":[80],"extract":[82],"both":[83],"structural":[84],"semantic":[86],"features":[87],"from":[88],"function":[89],"call":[90],"graphs,":[91],"augmented":[92],"adaptive":[94],"similarity":[95],"kernels":[96],"for":[97,163],"label":[99],"propagation":[100],"entropy-regularized":[102],"decision":[103],"boundaries":[104],"enhance":[106],"open-set":[107,144],"recognition.":[108],"Empirical":[109],"evaluations":[110],"demonstrate":[111],"achieves":[114],"accuracy":[117],"$92.64":[119],"\\%$":[120,141],"the":[122,129,136,143,158],"5":[123],"-way":[124],"10":[125],"-shot":[126],"setting":[127],"closedset":[130],"condition,":[131],"an":[133],"area":[134],"curve":[137],"(AUC)":[138],"$93.59":[140],"setting,":[145],"significantly":[146],"outperforming":[147],"state-of-the-art":[148],"baselines":[149],"detecting":[151],"previously":[152],"unseen":[153],"threats.":[154],"These":[155],"results":[156],"underscore":[157],"practical":[159],"applicability":[160],"robust":[164],"defense":[167],"scenarios":[169],"characterized":[170],"data.":[174]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-12-03T00:00:00"}
