{"id":"https://openalex.org/W4406612544","doi":"https://doi.org/10.1109/smc54092.2024.10830957","title":"Parallel-SWSA: Automated Extraction for Feature Sequences from Remote Access Trojan Attack Packets","display_name":"Parallel-SWSA: Automated Extraction for Feature Sequences from Remote Access Trojan Attack Packets","publication_year":2024,"publication_date":"2024-10-06","ids":{"openalex":"https://openalex.org/W4406612544","doi":"https://doi.org/10.1109/smc54092.2024.10830957"},"language":"en","primary_location":{"id":"doi:10.1109/smc54092.2024.10830957","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smc54092.2024.10830957","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Systems, Man, and Cybernetics (SMC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100460331","display_name":"Xiangyu Li","orcid":"https://orcid.org/0000-0003-1943-846X"},"institutions":[{"id":"https://openalex.org/I4391767781","display_name":"State Key Laboratory of Software Development Environment","ror":"https://ror.org/017r4dj03","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767781","https://openalex.org/I82880672"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyu Li","raw_affiliation_strings":["Beihang University,State Key Laboratory of Software Development Environment,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beihang University,State Key Laboratory of Software Development Environment,Beijing,China,100191","institution_ids":["https://openalex.org/I4391767781","https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013059521","display_name":"Hanbing Yan","orcid":null},"institutions":[{"id":"https://openalex.org/I4391767781","display_name":"State Key Laboratory of Software Development Environment","ror":"https://ror.org/017r4dj03","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767781","https://openalex.org/I82880672"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hanbing Yan","raw_affiliation_strings":["Beihang University,State Key Laboratory of Software Development Environment,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beihang University,State Key Laboratory of Software Development Environment,Beijing,China,100191","institution_ids":["https://openalex.org/I4391767781","https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100310123","display_name":"Bo Lang","orcid":null},"institutions":[{"id":"https://openalex.org/I4391767781","display_name":"State Key Laboratory of Software Development Environment","ror":"https://ror.org/017r4dj03","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767781","https://openalex.org/I82880672"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Lang","raw_affiliation_strings":["Beihang University,State Key Laboratory of Software Development Environment,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beihang University,State Key Laboratory of Software Development Environment,Beijing,China,100191","institution_ids":["https://openalex.org/I4391767781","https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102114358","display_name":"Yanzhe Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanzhe Zhang","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China,100093"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China,100093","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.32242895,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4942","last_page":"4949"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9775999784469604,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9750000238418579,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7452720403671265},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.7355340719223022},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5797607898712158},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5701361894607544},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4146729111671448},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39848050475120544},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34265363216400146},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2093372344970703}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7452720403671265},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.7355340719223022},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5797607898712158},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5701361894607544},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4146729111671448},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39848050475120544},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34265363216400146},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2093372344970703},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/smc54092.2024.10830957","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smc54092.2024.10830957","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Systems, Man, and Cybernetics (SMC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2029319725","https://openalex.org/W2546914119","https://openalex.org/W2606697812","https://openalex.org/W2920923464","https://openalex.org/W2955992195","https://openalex.org/W2966704109","https://openalex.org/W2998351022","https://openalex.org/W3093538749","https://openalex.org/W3101699933","https://openalex.org/W4230906712","https://openalex.org/W4389166149"],"related_works":["https://openalex.org/W4253721122","https://openalex.org/W1671033612","https://openalex.org/W4389527383","https://openalex.org/W4206524843","https://openalex.org/W2139923244","https://openalex.org/W2237899707","https://openalex.org/W576137284","https://openalex.org/W2116135171","https://openalex.org/W2057970756","https://openalex.org/W3124616678"],"abstract_inverted_index":{"Remote":[0],"Access":[1],"Trojans":[2],"(RATs)":[3],"are":[4,31],"malware":[5],"that":[6,170,190],"allow":[7],"attackers":[8],"to":[9,35,85,95,146],"remotely":[10],"control":[11],"infected":[12],"systems":[13,169],"and":[14,38,48,64,115,182,203],"steal":[15],"sensitive":[16],"user":[17],"data":[18],"via":[19],"the":[20,87,91,97,102,105,117,126,130,148,191],"internet.":[21],"Although":[22],"current":[23],"detection":[24,168,185],"methods":[25],"based":[26],"on":[27,45,179],"network":[28],"traffic":[29],"rules":[30,42,57,145],"widely":[32],"adopted":[33],"due":[34],"their":[36],"efficiency":[37,128],"accuracy,":[39],"writing":[40],"these":[41],"heavily":[43],"relies":[44],"expert":[46],"knowledge":[47],"is":[49,52,133],"costly.":[50],"This":[51,79,154],"incredibly":[53],"challenging":[54],"when":[55],"extracting":[56],"for":[58,110,143,166],"obfuscated":[59],"Trojans.":[60],"To":[61],"achieve":[62],"effective":[63],"efficient":[65],"RAT":[66,201],"detection,":[67],"this":[68],"paper":[69],"proposes":[70],"a":[71,82],"Parallel":[72],"Sliding":[73],"Window":[74],"Sequence":[75],"Alignment":[76],"(Parallel-SWSA)":[77],"algorithm.":[78],"method":[80,192],"uses":[81,90],"sliding":[83],"window":[84],"segment":[86],"data,":[88],"then":[89],"Jaccard":[92],"Similarity":[93],"coefficient":[94],"calculate":[96],"similarity":[98],"between":[99],"sequences":[100,132,161,198],"within":[101],"window,":[103],"selects":[104],"most":[106],"similar":[107],"sequence":[108],"pairs":[109],"alignment":[111],"one":[112],"by":[113],"one,":[114],"extracts":[116],"common":[118],"feature":[119,131,160,197],"sequences.":[120],"By":[121],"introducing":[122],"parallel":[123],"processing":[124],"techniques,":[125],"extraction":[127],"of":[129,150],"significantly":[134],"improved.":[135],"Additionally,":[136],"we":[137],"developed":[138],"an":[139],"automatic":[140],"conversion":[141],"tool":[142,155],"Snort":[144,172],"address":[147],"issue":[149],"labor-intensive":[151],"rule":[152],"writing.":[153],"can":[156,193],"automatically":[157],"transform":[158],"extracted":[159],"into":[162],"Snort-compatible":[163],"rules,":[164],"suitable":[165],"intrusion":[167],"support":[171],"rules.":[173],"The":[174,187],"Parallel-SWSA":[175],"algorithm":[176],"was":[177],"validated":[178],"five":[180],"datasets":[181],"achieved":[183],"high":[184],"rates.":[186],"results":[188],"indicate":[189],"effectively":[194],"extract":[195],"malicious":[196],"generated":[199],"during":[200],"communication":[202],"possess":[204],"strong":[205],"noise":[206],"resistance":[207],"capability.":[208]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}