{"id":"https://openalex.org/W7087118334","doi":"https://doi.org/10.1109/tdsc.2025.3619926","title":"DynMD: Energy-Based Dynamic Graph Representation Learning for Malware Detection","display_name":"DynMD: Energy-Based Dynamic Graph Representation Learning for Malware Detection","publication_year":2025,"publication_date":"2025-10-09","ids":{"openalex":"https://openalex.org/W7087118334","doi":"https://doi.org/10.1109/tdsc.2025.3619926"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3619926","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3619926","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Chen Liu","orcid":"https://orcid.org/0000-0002-8803-9617"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen Liu","raw_affiliation_strings":["Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8803-9617","affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Bo Li","orcid":"https://orcid.org/0000-0002-6297-712X"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6297-712X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yidong Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yidong Wu","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xudong Liu","orcid":"https://orcid.org/0000-0001-7102-0963"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xudong Liu","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7102-0963","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jianxin Li","orcid":"https://orcid.org/0000-0001-5152-0055"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianxin Li","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5152-0055","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":null,"display_name":"Chunpei Li","orcid":"https://orcid.org/0000-0002-0250-5374"},"institutions":[{"id":"https://openalex.org/I29739308","display_name":"Guangxi Normal University","ror":"https://ror.org/02frt9q65","country_code":"CN","type":"education","lineage":["https://openalex.org/I29739308"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunpei Li","raw_affiliation_strings":["School of Computer Science and Engineering & School of Software, Guangxi Normal University, Guilin, China"],"raw_orcid":"https://orcid.org/0000-0002-0250-5374","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering & School of Software, Guangxi Normal University, Guilin, China","institution_ids":["https://openalex.org/I29739308"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.57057425,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"1","first_page":"1592","last_page":"1607"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11092","display_name":"Spondyloarthritis Studies and Treatments","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/2745","display_name":"Rheumatology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T11092","display_name":"Spondyloarthritis Studies and Treatments","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/2745","display_name":"Rheumatology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10200","display_name":"Rheumatoid Arthritis Research and Therapies","score":0.002300000051036477,"subfield":{"id":"https://openalex.org/subfields/2745","display_name":"Rheumatology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10238","display_name":"Spine and Intervertebral Disc Pathology","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/2734","display_name":"Pathology and Forensic Medicine"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.843500018119812},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.538100004196167},{"id":"https://openalex.org/keywords/lossless-compression","display_name":"Lossless compression","score":0.49720001220703125},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.41679999232292175},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.41449999809265137},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.34929999709129333},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.3301999866962433},{"id":"https://openalex.org/keywords/partition","display_name":"Partition (number theory)","score":0.3215999901294708}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.867900013923645},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.843500018119812},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.538100004196167},{"id":"https://openalex.org/C81081738","wikidata":"https://www.wikidata.org/wiki/Q55542","display_name":"Lossless compression","level":3,"score":0.49720001220703125},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4587000012397766},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44290000200271606},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.41679999232292175},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.41449999809265137},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.39890000224113464},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35989999771118164},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.34929999709129333},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3301999866962433},{"id":"https://openalex.org/C42812","wikidata":"https://www.wikidata.org/wiki/Q1082910","display_name":"Partition (number theory)","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.28439998626708984},{"id":"https://openalex.org/C2777522414","wikidata":"https://www.wikidata.org/wiki/Q648457","display_name":"Social graph","level":3,"score":0.28139999508857727},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C48903430","wikidata":"https://www.wikidata.org/wiki/Q491370","display_name":"Graph partition","level":3,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3619926","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3619926","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Affordable and clean energy","id":"https://metadata.un.org/sdg/7","score":0.5260512828826904}],"awards":[{"id":"https://openalex.org/G5871736315","display_name":null,"funder_award_id":"62502466","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1545528966","https://openalex.org/W1967261319","https://openalex.org/W2064675550","https://openalex.org/W2070996757","https://openalex.org/W2131774270","https://openalex.org/W2244992438","https://openalex.org/W2610034660","https://openalex.org/W2752485287","https://openalex.org/W2781561856","https://openalex.org/W2808927717","https://openalex.org/W2922248686","https://openalex.org/W2944833253","https://openalex.org/W2965683718","https://openalex.org/W2966270452","https://openalex.org/W2988961468","https://openalex.org/W2998313947","https://openalex.org/W3005127313","https://openalex.org/W3006711782","https://openalex.org/W3007406851","https://openalex.org/W3011624874","https://openalex.org/W3125564951","https://openalex.org/W3165963211","https://openalex.org/W3192654261","https://openalex.org/W4212847133","https://openalex.org/W4214483364","https://openalex.org/W4221014202","https://openalex.org/W4238979297","https://openalex.org/W4249476571","https://openalex.org/W4283214123","https://openalex.org/W4290877727","https://openalex.org/W4312676126","https://openalex.org/W4319225041","https://openalex.org/W4385286624","https://openalex.org/W4385491025","https://openalex.org/W4387886112","https://openalex.org/W4388019121","https://openalex.org/W4389247871"],"related_works":[],"abstract_inverted_index":{"Graph":[0],"Neural":[1],"Networks":[2],"(GNNs)":[3],"have":[4],"found":[5],"widespread":[6],"application":[7],"in":[8,12,66],"malware":[9,34,89,117,161,185],"detection":[10,35,90,167,175],"tasks":[11],"recent":[13],"years,":[14],"aiming":[15],"to":[16,63,84,107,132,171,177],"uncover":[17],"the":[18,50,67,86,112,181],"malicious":[19],"nature":[20],"of":[21,88,114,189,192],"target":[22],"processes":[23],"by":[24,169],"aggregating":[25],"neighborhood":[26],"information":[27],"via":[28,95],"different":[29],"relations.":[30],"However,":[31],"current":[32],"GNN-based":[33],"models":[36],"are":[37],"primarily":[38],"designed":[39,83],"for":[40],"static":[41],"graphs":[42],"or":[43],"fixedwindow":[44],"dynamic":[45,97,118,128,135,147],"graphs;":[46],"they":[47],"often":[48],"overlook":[49],"correlation":[51],"between":[52],"distinct":[53],"continuous":[54],"behaviors":[55],"and":[56,70,142,153,173],"specific":[57],"attacks":[58],"(e.g.,":[59],"code":[60],"injection),":[61],"leading":[62],"a":[64,78,115,125],"disruption":[65],"attack's":[68],"continuity":[69],"incurring":[71],"substantial":[72],"computing":[73],"overhead.":[74],"This":[75,137],"paper":[76],"introduces":[77],"novel":[79],"model":[80],"dubbed":[81],"DynMD,":[82],"enhance":[85],"efficiency":[87],"on":[91,158],"streaming":[92],"behavioral":[93],"data":[94],"energy-based":[96],"graph":[98,129,148],"representation":[99],"learning.":[100],"Concretely,":[101],"DynMD":[102,123,165],"investigates":[103],"an":[104,187],"energy":[105],"function":[106],"adaptively":[108],"partition":[109],"windows,":[110],"facilitating":[111],"construction":[113],"lossless":[116],"heterogeneous":[119],"graph.":[120],"More":[121],"importantly,":[122],"proposes":[124],"unique":[126],"time-aware":[127],"learning":[130,149],"method":[131],"capture":[133],"energy-concordant":[134],"neighborhoods.":[136],"approach":[138],"involves":[139],"both":[140],"intra-graph":[141],"inter-graph":[143],"message":[144],"propagation,":[145],"promoting":[146],"while":[150],"avoiding":[151],"time-consuming":[152],"repetitive":[154],"computations.":[155],"Experimental":[156],"results":[157],"three":[159],"real-world":[160],"datasets":[162],"show":[163],"that":[164],"improves":[166],"accuracy":[168],"up":[170],"3.99%":[172],"achieves":[174],"3.81\u00d7":[176],"5.33\u00d7":[178],"faster":[179],"than":[180],"MG-DVD":[182],"framework,":[183],"identifying":[184],"within":[186],"average":[188],"40":[190],"seconds":[191],"execution.":[193]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}