{"id":"https://openalex.org/W2905130735","doi":"https://doi.org/10.1109/tdsc.2018.2884928","title":"Deep Learning and Visualization for Identifying Malware Families","display_name":"Deep Learning and Visualization for Identifying Malware Families","publication_year":2018,"publication_date":"2018-12-07","ids":{"openalex":"https://openalex.org/W2905130735","doi":"https://doi.org/10.1109/tdsc.2018.2884928","mag":"2905130735"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2018.2884928","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2018.2884928","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103829900","display_name":"Guosong Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I141962983","display_name":"Shanghai University of Engineering Science","ror":"https://ror.org/0557b9y08","country_code":"CN","type":"education","lineage":["https://openalex.org/I141962983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guosong Sun","raw_affiliation_strings":["School of Computer Engineering & Science, Shanghai University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Engineering & Science, Shanghai University, Shanghai, China","institution_ids":["https://openalex.org/I141962983"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084189341","display_name":"Quan Qian","orcid":"https://orcid.org/0000-0002-3020-005X"},"institutions":[{"id":"https://openalex.org/I113940042","display_name":"Shanghai University","ror":"https://ror.org/006teas31","country_code":"CN","type":"education","lineage":["https://openalex.org/I113940042"]},{"id":"https://openalex.org/I141962983","display_name":"Shanghai University of Engineering Science","ror":"https://ror.org/0557b9y08","country_code":"CN","type":"education","lineage":["https://openalex.org/I141962983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quan Qian","raw_affiliation_strings":["Materials Genome Institute, Shanghai University, Shanghai, China","School of Computer Engineering & Science, Shanghai University, Shanghai, China","Shanghai Institute for Advanced Communication and Data Science, Shanghai University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3020-005X","affiliations":[{"raw_affiliation_string":"Materials Genome Institute, Shanghai University, Shanghai, China","institution_ids":["https://openalex.org/I113940042"]},{"raw_affiliation_string":"School of Computer Engineering & Science, Shanghai University, Shanghai, China","institution_ids":["https://openalex.org/I141962983"]},{"raw_affiliation_string":"Shanghai Institute for Advanced Communication and Data Science, Shanghai University, Shanghai, China","institution_ids":["https://openalex.org/I113940042"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.2822,"has_fulltext":false,"cited_by_count":128,"citation_normalized_percentile":{"value":0.9734074,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"18","issue":"1","first_page":"283","last_page":"295"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9563000202178955,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8960320949554443},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8501825332641602},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6959692239761353},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6736592054367065},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6450371742248535},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.5967392921447754},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5663251280784607},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.5125932097434998},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5082259178161621},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5065666437149048},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4775591492652893},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.46018916368484497},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.4489898681640625},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3858213424682617},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33476272225379944},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.09043464064598083}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8960320949554443},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8501825332641602},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6959692239761353},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6736592054367065},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6450371742248535},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.5967392921447754},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5663251280784607},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.5125932097434998},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5082259178161621},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5065666437149048},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4775591492652893},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.46018916368484497},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.4489898681640625},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3858213424682617},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33476272225379944},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.09043464064598083},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2018.2884928","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2018.2884928","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4699999988079071,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G4094304826","display_name":null,"funder_award_id":"15DZ2260301","funder_id":"https://openalex.org/F4320321885","funder_display_name":"Science and Technology Commission of Shanghai Municipality"},{"id":"https://openalex.org/G7370336744","display_name":null,"funder_award_id":"16ZR1411200","funder_id":"https://openalex.org/F4320309612","funder_display_name":"Natural Science Foundation of Shanghai"}],"funders":[{"id":"https://openalex.org/F4320309612","display_name":"Natural Science Foundation of Shanghai","ror":null},{"id":"https://openalex.org/F4320321885","display_name":"Science and Technology Commission of Shanghai Municipality","ror":"https://ror.org/03kt66j61"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":65,"referenced_works":["https://openalex.org/W169539560","https://openalex.org/W179875071","https://openalex.org/W194249466","https://openalex.org/W646354405","https://openalex.org/W1412775481","https://openalex.org/W1498436455","https://openalex.org/W1503224444","https://openalex.org/W1545528966","https://openalex.org/W1571989395","https://openalex.org/W1810943226","https://openalex.org/W1924770834","https://openalex.org/W2005662348","https://openalex.org/W2010065958","https://openalex.org/W2012132268","https://openalex.org/W2043263066","https://openalex.org/W2047167450","https://openalex.org/W2057787526","https://openalex.org/W2064675550","https://openalex.org/W2081193615","https://openalex.org/W2084979543","https://openalex.org/W2099053789","https://openalex.org/W2099471712","https://openalex.org/W2110889728","https://openalex.org/W2111038628","https://openalex.org/W2131774270","https://openalex.org/W2132069633","https://openalex.org/W2132874238","https://openalex.org/W2133656308","https://openalex.org/W2136255210","https://openalex.org/W2137314966","https://openalex.org/W2143612262","https://openalex.org/W2144112223","https://openalex.org/W2172140247","https://openalex.org/W2212703438","https://openalex.org/W2508015754","https://openalex.org/W2568998043","https://openalex.org/W2576498804","https://openalex.org/W2618219509","https://openalex.org/W2638718630","https://openalex.org/W2660965249","https://openalex.org/W2766576889","https://openalex.org/W2788864200","https://openalex.org/W2962849096","https://openalex.org/W2963266340","https://openalex.org/W2963709863","https://openalex.org/W2964199361","https://openalex.org/W4256462051","https://openalex.org/W4285719527","https://openalex.org/W4320013936","https://openalex.org/W6606918967","https://openalex.org/W6607333740","https://openalex.org/W6607862964","https://openalex.org/W6621201870","https://openalex.org/W6628233427","https://openalex.org/W6629815555","https://openalex.org/W6638273328","https://openalex.org/W6640212811","https://openalex.org/W6661181168","https://openalex.org/W6679663036","https://openalex.org/W6680370740","https://openalex.org/W6688167117","https://openalex.org/W6731344955","https://openalex.org/W6738397735","https://openalex.org/W6739480119","https://openalex.org/W6739893556"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W3152891574","https://openalex.org/W2249809453","https://openalex.org/W2388600609"],"abstract_inverted_index":{"The":[0],"growing":[1],"threat":[2],"of":[3,29,35,57,80,93,121,125,168],"malware":[4,17,58,171],"is":[5,22,173,181],"becoming":[6],"more":[7,9],"and":[8,40,97,175],"difficult":[10],"to":[11,24,63,86,109,128,144],"ignore.":[12],"In":[13],"this":[14],"paper,":[15],"a":[16,107,159],"feature":[18,88,111],"images":[19,89],"generation":[20],"method":[21,50,157],"used":[23],"combine":[25],"the":[26,33,54,61,65,72,75,91,94,98,102,122,142,146,163,170,176],"static":[27],"analysis":[28],"malicious":[30],"code":[31,67],"with":[32,68],"methods":[34],"recurrent":[36],"neural":[37,42],"networks":[38,43],"(RNN)":[39],"convolutional":[41],"(CNN).":[44],"By":[45],"using":[46],"an":[47],"RNN,":[48],"our":[49,156],"considers":[51],"not":[52],"only":[53],"original":[55,66,95],"information":[56],"but":[59],"also":[60],"ability":[62],"associate":[64],"timing":[69],"characteristics;":[70],"furthermore,":[71],"process":[73],"reduces":[74],"dependence":[76],"on":[77],"category":[78],"labels":[79],"malware.":[81],"Then,":[82],"we":[83,105,114,133,140],"use":[84],"minhash":[85],"generate":[87],"from":[90,101],"fusion":[92],"codes":[96,100],"predictive":[99],"RNN.":[103],"Finally,":[104],"train":[106],"CNN":[108],"classify":[110],"images.":[112],"When":[113,139],"trained":[115],"very":[116],"few":[117],"samples":[118],"(the":[119],"proportion":[120,143],"sample":[123],"size":[124],"training":[126],"dataset":[127,130],"validation":[129],"was":[131],"1:30),":[132],"obtained":[134],"accuracy":[135,147],"over":[136],"92":[137],"percent.":[138,150],"adjust":[141],"3:1,":[145],"exceeds":[148],"99.5":[149],"As":[151],"shown":[152],"in":[153],"confusion":[154],"matrices,":[155],"obtains":[158],"good":[160],"result,":[161],"where":[162],"worst":[164],"false":[165,178],"positive":[166,179],"rate":[167,180],"all":[169],"families":[172],"0.0147":[174],"average":[177],"0.0058.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":26},{"year":2022,"cited_by_count":19},{"year":2021,"cited_by_count":22},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":6}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}
