{"id":"https://openalex.org/W2293923001","doi":"https://doi.org/10.1109/tdsc.2015.2457918","title":"Malware Detection in Cloud Computing Infrastructures","display_name":"Malware Detection in Cloud Computing Infrastructures","publication_year":2015,"publication_date":"2015-07-17","ids":{"openalex":"https://openalex.org/W2293923001","doi":"https://doi.org/10.1109/tdsc.2015.2457918","mag":"2293923001"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2015.2457918","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2015.2457918","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://researchonline.ljmu.ac.uk/id/eprint/2139/1/malware-detection-with-minor-changes.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018139510","display_name":"Michael R. Watson","orcid":null},"institutions":[{"id":"https://openalex.org/I67415387","display_name":"Lancaster University","ror":"https://ror.org/04f2nsd36","country_code":"GB","type":"education","lineage":["https://openalex.org/I67415387"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Michael R. Watson","raw_affiliation_strings":["School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom","institution_ids":["https://openalex.org/I67415387"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Noor-ul-hassan Shirazi","orcid":null},"institutions":[{"id":"https://openalex.org/I67415387","display_name":"Lancaster University","ror":"https://ror.org/04f2nsd36","country_code":"GB","type":"education","lineage":["https://openalex.org/I67415387"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Noor-ul-hassan Shirazi","raw_affiliation_strings":["School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom","institution_ids":["https://openalex.org/I67415387"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021412159","display_name":"Angelos K. Marnerides","orcid":"https://orcid.org/0000-0002-7996-6216"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Angelos K. Marnerides","raw_affiliation_strings":["Liverpool John Moores University, Liverpool, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Liverpool John Moores University, Liverpool, United Kingdom","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042425283","display_name":"Andreas Mauthe","orcid":"https://orcid.org/0000-0002-8727-9440"},"institutions":[{"id":"https://openalex.org/I67415387","display_name":"Lancaster University","ror":"https://ror.org/04f2nsd36","country_code":"GB","type":"education","lineage":["https://openalex.org/I67415387"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Andreas Mauthe","raw_affiliation_strings":["School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom","institution_ids":["https://openalex.org/I67415387"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030962937","display_name":"David Hutchison","orcid":"https://orcid.org/0000-0001-6052-0559"},"institutions":[{"id":"https://openalex.org/I67415387","display_name":"Lancaster University","ror":"https://ror.org/04f2nsd36","country_code":"GB","type":"education","lineage":["https://openalex.org/I67415387"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"David Hutchison","raw_affiliation_strings":["School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing and Communications, Lancaster University, Lancaster, Lancashire, United Kingdom","institution_ids":["https://openalex.org/I67415387"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":17.2121,"has_fulltext":true,"cited_by_count":171,"citation_normalized_percentile":{"value":0.99092686,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"13","issue":"2","first_page":"192","last_page":"205"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.904701828956604},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8204044103622437},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8021093606948853},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.5776458978652954},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5662743449211121},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5642832517623901},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.43466493487358093},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4315016269683838},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.424746572971344},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.41375863552093506},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.4128614068031311},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3704702854156494},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.35986995697021484},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2984590530395508},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.19744521379470825},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18797016143798828}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.904701828956604},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8204044103622437},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8021093606948853},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.5776458978652954},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5662743449211121},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5642832517623901},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.43466493487358093},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4315016269683838},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.424746572971344},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.41375863552093506},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.4128614068031311},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3704702854156494},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.35986995697021484},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2984590530395508},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.19744521379470825},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18797016143798828},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tdsc.2015.2457918","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2015.2457918","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:researchonline.ljmu.ac.uk:2139","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/2139/1/malware-detection-with-minor-changes.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"pmh:oai:eprints.gla.ac.uk:221853","is_oa":false,"landing_page_url":"http://eprints.gla.ac.uk/221853/","pdf_url":null,"source":{"id":"https://openalex.org/S4210235606","display_name":"ENLIGHTEN (Jurnal Bimbingan dan Konseling Islam)","issn_l":"2622-8912","issn":["2622-8912","2622-8920"],"is_oa":false,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Articles"}],"best_oa_location":{"id":"pmh:oai:researchonline.ljmu.ac.uk:2139","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/2139/1/malware-detection-with-minor-changes.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},"sustainable_development_goals":[{"score":0.6499999761581421,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2749656849","display_name":"India-UK Advanced Technology Centre (IU-ATC) in Next Generation Networks Systems and Services (Phase Two Follow-on)","funder_award_id":"EP/J016675/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G5034129447","display_name":null,"funder_award_id":"EP/J016675/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2293923001.pdf","grobid_xml":"https://content.openalex.org/works/W2293923001.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W80949692","https://openalex.org/W191098608","https://openalex.org/W1609312605","https://openalex.org/W1636725296","https://openalex.org/W1904710828","https://openalex.org/W1975074447","https://openalex.org/W1977415353","https://openalex.org/W1980156780","https://openalex.org/W1980418810","https://openalex.org/W1980939416","https://openalex.org/W1997760816","https://openalex.org/W1999318832","https://openalex.org/W2005182641","https://openalex.org/W2006172326","https://openalex.org/W2007286423","https://openalex.org/W2013704995","https://openalex.org/W2023721289","https://openalex.org/W2045587977","https://openalex.org/W2047111942","https://openalex.org/W2047350783","https://openalex.org/W2052230418","https://openalex.org/W2058410460","https://openalex.org/W2097015782","https://openalex.org/W2104691641","https://openalex.org/W2105497548","https://openalex.org/W2113252658","https://openalex.org/W2122646361","https://openalex.org/W2123967542","https://openalex.org/W2124563017","https://openalex.org/W2127577941","https://openalex.org/W2138644293","https://openalex.org/W4239383774","https://openalex.org/W4245341483","https://openalex.org/W4285719527","https://openalex.org/W6607784307","https://openalex.org/W6636174212","https://openalex.org/W6636615889","https://openalex.org/W6639951305","https://openalex.org/W6662081087","https://openalex.org/W6677031525"],"related_works":["https://openalex.org/W2148749405","https://openalex.org/W2104105430","https://openalex.org/W1515917392","https://openalex.org/W1973516247","https://openalex.org/W1991063492","https://openalex.org/W2613320081","https://openalex.org/W2179519055","https://openalex.org/W2743348030","https://openalex.org/W2747005099","https://openalex.org/W2145292010"],"abstract_inverted_index":{"Cloud":[0],"services":[1,14],"are":[2,15,30],"prominent":[3],"within":[4],"the":[5,44,88,94,102,106,112,150,164,168],"private,":[6],"public":[7],"and":[8,21,28,67,114,144,188],"commercial":[9],"domains.":[10],"Many":[11],"of":[12,79,90,108,117,132,142,152,196,205],"these":[13],"expected":[16],"to":[17,36,42,46,50,55,174,185,190],"be":[18],"always":[19],"on":[20,163],"have":[22],"a":[23,39,118,128,191],"critical":[24],"nature;":[25],"therefore,":[26],"security":[27],"resilience":[29,82],"increasingly":[31],"important":[32],"aspects.":[33],"In":[34,62],"order":[35],"remain":[37],"resilient,":[38],"cloud":[40,60,71,81,119,186],"needs":[41],"possess":[43],"ability":[45],"react":[47],"not":[48,154],"only":[49,155],"known":[51],"threats,":[52],"but":[53,158],"also":[54,159],"new":[56,198],"challenges":[57],"that":[58,123,171],"target":[59],"infrastructures.":[61],"this":[63],"paper":[64,169],"we":[65,86,148],"introduce":[66],"discuss":[68],"an":[69],"online":[70],"anomaly":[72],"detection":[73,77,92,130,175,193],"approach,":[74],"comprising":[75],"dedicated":[76,177],"components":[78,179],"our":[80,124,172],"architecture.":[83],"More":[84],"specifically,":[85],"exhibit":[87],"applicability":[89],"novelty":[91],"under":[93],"one-class":[95],"support":[96],"Vector":[97],"Machine":[98],"(SVM)":[99],"formulation":[100],"at":[101,111],"hypervisor":[103],"level,":[104],"through":[105],"utilisation":[107],"features":[109],"gathered":[110],"system":[113,194],"network":[115],"levels":[116],"node.":[120],"We":[121],"demonstrate":[122],"scheme":[125],"can":[126],"reach":[127],"high":[129],"accuracy":[131],"over":[133],"<inline-formula><tex-math":[134],"notation=\"LaTeX\">":[135],"$90$</tex-math></inline-formula>":[136],"percent":[137],"whilst":[138],"detecting":[139,197],"various":[140],"types":[141],"malware":[143,199],"DoS":[145],"attacks.":[146],"Furthermore,":[147],"evaluate":[149],"merits":[151],"considering":[153],"system-level":[156],"data,":[157],"network-level":[160],"data":[161],"depending":[162],"attack":[165],"type.":[166],"Finally,":[167],"shows":[170],"approach":[173],"using":[176],"monitoring":[178],"per":[180],"VM":[181],"is":[182],"particularly":[183],"applicable":[184],"scenarios":[187],"leads":[189],"flexible":[192],"capable":[195],"strains":[200],"with":[201],"no":[202],"prior":[203],"knowledge":[204],"their":[206,209],"functionality":[207],"or":[208],"underlying":[210],"instructions.":[211]},"counts_by_year":[{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":22},{"year":2020,"cited_by_count":30},{"year":2019,"cited_by_count":25},{"year":2018,"cited_by_count":19},{"year":2017,"cited_by_count":23},{"year":2016,"cited_by_count":6}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}