{"id":"https://openalex.org/W4413137219","doi":"https://doi.org/10.1109/tdsc.2025.3596831","title":"JPEG-Domain Malware Detection With Pretrained Lightweight Vision Transformer Model","display_name":"JPEG-Domain Malware Detection With Pretrained Lightweight Vision Transformer Model","publication_year":2025,"publication_date":"2025-08-07","ids":{"openalex":"https://openalex.org/W4413137219","doi":"https://doi.org/10.1109/tdsc.2025.3596831"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3596831","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3596831","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002721866","display_name":"Binghui Zou","orcid":"https://orcid.org/0000-0003-4279-9562"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Binghui Zou","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0003-4279-9562","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002971389","display_name":"Chunjie Cao","orcid":"https://orcid.org/0000-0001-9439-8256"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunjie Cao","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0001-9439-8256","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000462480","display_name":"Fangjian Tao","orcid":"https://orcid.org/0000-0001-8637-7383"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fangjian Tao","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yang Sun","orcid":"https://orcid.org/0009-0009-7342-4684"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Sun","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0009-0009-7342-4684","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Longjuan Wang","orcid":"https://orcid.org/0000-0002-1135-6251"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Longjuan Wang","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0002-1135-6251","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100401890","display_name":"Yuqing Zhang","orcid":"https://orcid.org/0000-0002-0015-8874"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuqing Zhang","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070575632","display_name":"Jingzhang Sun","orcid":"https://orcid.org/0000-0002-6961-6677"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingzhang Sun","raw_affiliation_strings":["School of Cyberspace Security, Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0002-6961-6677","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5002721866"],"corresponding_institution_ids":["https://openalex.org/I20942203"],"apc_list":null,"apc_paid":null,"fwci":2.5506,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90144883,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"22","issue":"6","first_page":"7403","last_page":"7417"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9901000261306763,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9638000130653381,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7954554557800293},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.632246196269989},{"id":"https://openalex.org/keywords/jpeg","display_name":"JPEG","score":0.5678448677062988},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.5422055125236511},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5090832114219666},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.49301478266716003},{"id":"https://openalex.org/keywords/computer-graphics","display_name":"Computer graphics (images)","score":0.3376408517360687},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.32404381036758423},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2744256258010864},{"id":"https://openalex.org/keywords/data-compression","display_name":"Data compression","score":0.21766698360443115},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08584520220756531}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7954554557800293},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.632246196269989},{"id":"https://openalex.org/C198751489","wikidata":"https://www.wikidata.org/wiki/Q2195","display_name":"JPEG","level":3,"score":0.5678448677062988},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.5422055125236511},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5090832114219666},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.49301478266716003},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.3376408517360687},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.32404381036758423},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2744256258010864},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.21766698360443115},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08584520220756531},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3596831","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3596831","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W2010065958","https://openalex.org/W2046185165","https://openalex.org/W2324464293","https://openalex.org/W2749928722","https://openalex.org/W2752485287","https://openalex.org/W2752782242","https://openalex.org/W2768073432","https://openalex.org/W2791541601","https://openalex.org/W2794801050","https://openalex.org/W2795845996","https://openalex.org/W2885070483","https://openalex.org/W2890434219","https://openalex.org/W2900275727","https://openalex.org/W2905130735","https://openalex.org/W2944885779","https://openalex.org/W2963163009","https://openalex.org/W2963777745","https://openalex.org/W2982083293","https://openalex.org/W2986166181","https://openalex.org/W3006334803","https://openalex.org/W3006711782","https://openalex.org/W3016101149","https://openalex.org/W3038770761","https://openalex.org/W3162825625","https://openalex.org/W3175941285","https://openalex.org/W3178593045","https://openalex.org/W3186739895","https://openalex.org/W3186874092","https://openalex.org/W3189794512","https://openalex.org/W4210345192","https://openalex.org/W4212847133","https://openalex.org/W4226294137","https://openalex.org/W4306316917","https://openalex.org/W4306406265","https://openalex.org/W4308632297","https://openalex.org/W4313119132","https://openalex.org/W4313594499","https://openalex.org/W4323655380","https://openalex.org/W4360969865","https://openalex.org/W4386071602","https://openalex.org/W4386568539","https://openalex.org/W4390603899","https://openalex.org/W4390874070"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W3152891574","https://openalex.org/W4316881845","https://openalex.org/W2975527072"],"abstract_inverted_index":{"Malware":[0],"is":[1,161],"proliferating":[2],"at":[3],"an":[4,154],"exponential":[5],"rate":[6],"in":[7,49],"cyberspace,":[8],"posing":[9],"serious":[10],"threats":[11],"to":[12,70,116],"on-device":[13,189],"systems":[14],"characterized":[15],"by":[16,29,112],"limited":[17],"computational":[18,75],"capabilities.":[19],"In":[20],"this":[21],"work,":[22],"we":[23],"address":[24],"the":[25,50,80],"critical":[26],"challenge":[27],"posed":[28],"data":[30,72,110],"imbalance\u2014where":[31],"rare":[32],"malware":[33,95],"families":[34],"receive":[35],"inadequate":[36],"representation\u2014by":[37],"proposing":[38],"MalViT,":[39],"a":[40],"lightweight":[41],"Vision":[42],"Transformer":[43],"(ViT)":[44],"architecture":[45],"that":[46,107],"directly":[47],"operates":[48],"JPEG":[51,148],"frequency":[52],"domain.":[53],"Rather":[54],"than":[55,132,164,169],"converting":[56],"Huffman-coded":[57],"signals":[58],"into":[59],"RGB":[60],"spatial":[61],"images,":[62,149],"MalViT":[63,108,123,150],"leverages":[64],"Discrete":[65],"Cosine":[66],"Transform":[67],"(DCT)":[68],"coefficients":[69],"reduce":[71],"redundancy":[73],"and":[74,86,101,121,127,166,179],"overhead.":[76],"We":[77],"further":[78],"improve":[79],"model\u2019s":[81],"generalization":[82],"through":[83],"both":[84],"pre-training":[85],"fine-tuning":[87],"workflows.":[88],"Comprehensive":[89],"evaluations":[90],"on":[91],"two":[92],"large-scale,":[93],"real-world":[94],"datasets,":[96],"MalNet-Image":[97],"(1.26":[98],"M":[99],"samples)":[100],"BODMAS":[102],"(51":[103],"K":[104],"samples),":[105],"demonstrate":[106],"accelerates":[109],"loading":[111],"nearly":[113],"threefold":[114],"compared":[115],"existing":[117],"methods.":[118],"On":[119],"GPU":[120],"CPU,":[122],"achieves":[124],"approximately":[125],"2.0\u00d7":[126],"4.7\u00d7":[128],"faster":[129,163,168],"inference":[130,152],"throughput":[131],"MobileViT,":[133],"respectively,":[134],"while":[135],"incurring":[136],"minimal":[137],"or":[138],"even":[139],"improved":[140],"accuracy":[141],"loss.":[142],"When":[143],"processing":[144],"224":[145],"\u00d7":[146],"224-pixel":[147],"completes":[151],"within":[153],"average":[155],"of":[156],"3.12ms":[157],"per":[158],"sample,":[159],"which":[160],"8.79\u00d7":[162],"VisMal":[165],"5.91\u00d7":[167],"ViT4Mal.":[170],"Furthermore,":[171],"its":[172],"compact":[173],"design":[174],"comprises":[175],"only":[176],"1.1M":[177],"parameters":[178],"requires":[180],"10M":[181],"MACs,":[182],"making":[183],"it":[184],"particularly":[185],"suitable":[186],"for":[187],"resource-constrained":[188],"deployment.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-21T01:58:51.020947","created_date":"2025-10-10T00:00:00"}