{"id":"https://openalex.org/W4211030792","doi":"https://doi.org/10.1109/tc.2022.3150573","title":"Hardware-Assisted Malware Detection and Localization using Explainable Machine Learning","display_name":"Hardware-Assisted Malware Detection and Localization using Explainable Machine Learning","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4211030792","doi":"https://doi.org/10.1109/tc.2022.3150573"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2022.3150573","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2022.3150573","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013876571","display_name":"Zhixin Pan","orcid":"https://orcid.org/0000-0001-9136-1730"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhixin Pan","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","Computer & Information Science & Engineering, University of Florida, 3463 Gainesville, Florida, United States, 32611-7011"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"Computer & Information Science & Engineering, University of Florida, 3463 Gainesville, Florida, United States, 32611-7011","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057828326","display_name":"Jennifer Sheldon","orcid":"https://orcid.org/0000-0002-7211-6761"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jennifer Sheldon","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","Computer & Information Science & Engineering, University of Florida, 3463 Gainesville, Florida, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"Computer & Information Science & Engineering, University of Florida, 3463 Gainesville, Florida, United States","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006818844","display_name":"Prabhat Mishra","orcid":"https://orcid.org/0000-0003-3653-6221"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prabhat Mishra","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","Computer and Information Science and Engineering, University of Florida, Gainesville, Florida, United States, 32611-6120"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"Computer and Information Science and Engineering, University of Florida, Gainesville, Florida, United States, 32611-6120","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":5.9388,"has_fulltext":false,"cited_by_count":42,"citation_normalized_percentile":{"value":0.97208032,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9390207529067993},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.875194787979126},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6175558567047119},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6063835024833679},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5835623741149902},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.49061480164527893},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4661129117012024},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.4627535343170166},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.4479031562805176},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.4105672538280487},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3390052914619446},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3389206528663635},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18910232186317444}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9390207529067993},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.875194787979126},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6175558567047119},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6063835024833679},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5835623741149902},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49061480164527893},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4661129117012024},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.4627535343170166},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.4479031562805176},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.4105672538280487},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3390052914619446},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3389206528663635},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18910232186317444}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2022.3150573","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2022.3150573","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6299999952316284}],"awards":[{"id":"https://openalex.org/G7994274117","display_name":null,"funder_award_id":"CCF-1908131","funder_id":"https://openalex.org/F4320309090","funder_display_name":"Center for Hierarchical Manufacturing, National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320309090","display_name":"Center for Hierarchical Manufacturing, National Science Foundation","ror":"https://ror.org/043trmd87"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W161166442","https://openalex.org/W200681053","https://openalex.org/W1498436455","https://openalex.org/W1499864241","https://openalex.org/W1893133781","https://openalex.org/W1924770834","https://openalex.org/W1945616565","https://openalex.org/W1956767865","https://openalex.org/W1966948031","https://openalex.org/W1973403081","https://openalex.org/W2024170198","https://openalex.org/W2069143585","https://openalex.org/W2071289869","https://openalex.org/W2132874238","https://openalex.org/W2138471478","https://openalex.org/W2166509025","https://openalex.org/W2166844173","https://openalex.org/W2243397390","https://openalex.org/W2319159802","https://openalex.org/W2402302915","https://openalex.org/W2432142698","https://openalex.org/W2604138444","https://openalex.org/W2610321374","https://openalex.org/W2807415350","https://openalex.org/W2888394138","https://openalex.org/W2919115771","https://openalex.org/W2932551155","https://openalex.org/W2945980541","https://openalex.org/W3116877279","https://openalex.org/W3135696753","https://openalex.org/W3185872651","https://openalex.org/W3195409571","https://openalex.org/W4236137412","https://openalex.org/W4247833239","https://openalex.org/W4280636456","https://openalex.org/W4293846201","https://openalex.org/W6608206699","https://openalex.org/W6629930100","https://openalex.org/W6640212811","https://openalex.org/W6640425456","https://openalex.org/W6712909570","https://openalex.org/W6717848421","https://openalex.org/W6739868092","https://openalex.org/W6753216052"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2728713145","https://openalex.org/W2470502009","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W4360993664","https://openalex.org/W2465235098"],"abstract_inverted_index":{"Malicious":[0],"software,":[1],"popularly":[2],"known":[3],"as":[4,9,20],"malware,":[5],"is":[6],"widely":[7],"acknowledged":[8],"a":[10,70,78,160],"serious":[11],"threat":[12],"to":[13,109,135],"modern":[14],"computing":[15],"systems.":[16],"Software-based":[17],"solutions,":[18],"such":[19],"anti-virus":[21],"software":[22],"(AVS),":[23],"are":[24],"not":[25],"effective":[26,58,123],"since":[27],"they":[28],"rely":[29],"on":[30],"matching":[31],"patterns":[32],"that":[33,97,118,168],"can":[34,101,133,171],"be":[35,67],"easily":[36],"fooled":[37],"by":[38],"carefully":[39],"crafted":[40],"malware":[41,50,80,165,176],"with":[42,179],"obfuscation":[43],"or":[44],"other":[45],"deviation":[46],"capabilities.":[47],"While":[48],"recent":[49],"detection":[51,64,81,177],"methods":[52],"provide":[53,102],"promising":[54],"results":[55,65,108,178],"through":[56,122],"an":[57,103],"utilization":[59,124],"of":[60,106,113,125,138,163],"hardware":[61,126],"features,":[62],"the":[63,111,119],"cannot":[66],"interpreted":[68],"in":[69],"meaningful":[71],"way.":[72],"In":[73],"this":[74],"paper,":[75],"we":[76,94,116,142],"propose":[77],"hardware-assisted":[79],"framework":[82,170],"using":[83,150,159],"explainable":[84,120],"machine":[85],"learning.":[86],"This":[87],"paper":[88],"makes":[89],"three":[90],"important":[91],"contributions.":[92],"First,":[93],"theoretically":[95],"establish":[96],"our":[98,169],"proposed":[99],"method":[100],"interpretable":[104],"explanation":[105],"classification":[107],"address":[110],"challenge":[112],"transparency.":[114],"Next,":[115],"show":[117],"outcome":[121],"performance":[127],"counters":[128],"and":[129,153,174],"embedded":[130],"trace":[131],"buffer":[132],"lead":[134],"accurate":[136,173],"localization":[137],"malicious":[139],"behavior.":[140],"Finally,":[141],"have":[143],"performed":[144],"efficiency":[145],"versus":[146],"accuracy":[147],"trade-off":[148],"analysis":[149],"decision":[151],"tree":[152],"recurrent":[154],"neural":[155],"networks.":[156],"Extensive":[157],"evaluation":[158],"wide":[161],"variety":[162],"real-world":[164],"dataset":[166],"demonstrates":[167],"produce":[172],"human-understandable":[175],"provable":[180],"guarantees.":[181]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":6}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}