{"id":"https://openalex.org/W3036491774","doi":"https://doi.org/10.1109/tetci.2019.2910243","title":"An Enhanced Stacked LSTM Method With No Random Initialization for Malware Threat Hunting in Safety and Time-Critical Systems","display_name":"An Enhanced Stacked LSTM Method With No Random Initialization for Malware Threat Hunting in Safety and Time-Critical Systems","publication_year":2020,"publication_date":"2020-06-22","ids":{"openalex":"https://openalex.org/W3036491774","doi":"https://doi.org/10.1109/tetci.2019.2910243","mag":"3036491774"},"language":"en","primary_location":{"id":"doi:10.1109/tetci.2019.2910243","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetci.2019.2910243","pdf_url":null,"source":{"id":"https://openalex.org/S4210210251","display_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","issn_l":"2471-285X","issn":["2471-285X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074265025","display_name":"Amir Namavar Jahromi","orcid":"https://orcid.org/0000-0002-9709-5872"},"institutions":[{"id":"https://openalex.org/I166459259","display_name":"Shiraz University","ror":"https://ror.org/028qtbk54","country_code":"IR","type":"education","lineage":["https://openalex.org/I166459259"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Amir Namavar Jahromi","raw_affiliation_strings":["Department of IT and Computer Engineering, Shiraz University, 8433471964 Shiraz, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of IT and Computer Engineering, Shiraz University, 8433471964 Shiraz, Iran","institution_ids":["https://openalex.org/I166459259"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022739916","display_name":"Sattar Hashemi","orcid":"https://orcid.org/0000-0001-6981-8810"},"institutions":[{"id":"https://openalex.org/I166459259","display_name":"Shiraz University","ror":"https://ror.org/028qtbk54","country_code":"IR","type":"education","lineage":["https://openalex.org/I166459259"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Sattar Hashemi","raw_affiliation_strings":["Department of IT and Computer Engineering, Shiraz University, 8433471964 Shiraz, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of IT and Computer Engineering, Shiraz University, 8433471964 Shiraz, Iran","institution_ids":["https://openalex.org/I166459259"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038019914","display_name":"Ali Dehghantanha","orcid":"https://orcid.org/0000-0002-9294-7554"},"institutions":[{"id":"https://openalex.org/I79817857","display_name":"University of Guelph","ror":"https://ror.org/01r7awg59","country_code":"CA","type":"education","lineage":["https://openalex.org/I79817857"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ali Dehghantanha","raw_affiliation_strings":["School of Computing, University of Guelph, Guelph, Canada"],"raw_orcid":"https://orcid.org/0000-0002-9294-7554","affiliations":[{"raw_affiliation_string":"School of Computing, University of Guelph, Guelph, Canada","institution_ids":["https://openalex.org/I79817857"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087589295","display_name":"Reza M. Parizi","orcid":"https://orcid.org/0000-0002-0049-4296"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reza M. Parizi","raw_affiliation_strings":["College of Computing and Software Engineering, Kennesaw State University, Marietta, USA"],"raw_orcid":"https://orcid.org/0000-0002-0049-4296","affiliations":[{"raw_affiliation_string":"College of Computing and Software Engineering, Kennesaw State University, Marietta, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security and the Department of Electrical and Computer Engineering, University of Texas at San Antonio, San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security and the Department of Electrical and Computer Engineering, University of Texas at San Antonio, San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.2528,"has_fulltext":false,"cited_by_count":90,"citation_normalized_percentile":{"value":0.98487893,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"4","issue":"5","first_page":"630","last_page":"640"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8496729135513306},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8274843692779541},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.7127959728240967},{"id":"https://openalex.org/keywords/opcode","display_name":"Opcode","score":0.5611159205436707},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5138661861419678},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.5110803842544556},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.49070608615875244},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.41793137788772583},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4113893508911133},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4016403555870056},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40093374252319336}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8496729135513306},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8274843692779541},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.7127959728240967},{"id":"https://openalex.org/C52173422","wikidata":"https://www.wikidata.org/wiki/Q766483","display_name":"Opcode","level":2,"score":0.5611159205436707},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5138661861419678},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.5110803842544556},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49070608615875244},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.41793137788772583},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4113893508911133},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4016403555870056},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40093374252319336},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tetci.2019.2910243","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetci.2019.2910243","pdf_url":null,"source":{"id":"https://openalex.org/S4210210251","display_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","issn_l":"2471-285X","issn":["2471-285X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:digitalcommons.kennesaw.edu:facpubs-5846","is_oa":false,"landing_page_url":"https://digitalcommons.kennesaw.edu/facpubs/4698","pdf_url":null,"source":{"id":"https://openalex.org/S4377196456","display_name":"DigitalCommons - Kennesaw State University (Kennesaw State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172980758","host_organization_name":"Kennesaw State University","host_organization_lineage":["https://openalex.org/I172980758"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Faculty Articles","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W1877570817","https://openalex.org/W2035364453","https://openalex.org/W2047019718","https://openalex.org/W2047167450","https://openalex.org/W2064675550","https://openalex.org/W2076063813","https://openalex.org/W2122672392","https://openalex.org/W2138857742","https://openalex.org/W2150355110","https://openalex.org/W2150907703","https://openalex.org/W2158698691","https://openalex.org/W2180748755","https://openalex.org/W2313513770","https://openalex.org/W2397347223","https://openalex.org/W2490191290","https://openalex.org/W2500174195","https://openalex.org/W2517869697","https://openalex.org/W2520583395","https://openalex.org/W2565575913","https://openalex.org/W2574572704","https://openalex.org/W2599737060","https://openalex.org/W2599823825","https://openalex.org/W2620763085","https://openalex.org/W2632775315","https://openalex.org/W2734777338","https://openalex.org/W2742491462","https://openalex.org/W2753669113","https://openalex.org/W2778775032","https://openalex.org/W2782578820","https://openalex.org/W2782676859","https://openalex.org/W2783920770","https://openalex.org/W2788141255","https://openalex.org/W2788864200","https://openalex.org/W2789326120","https://openalex.org/W2789983203","https://openalex.org/W2790484531","https://openalex.org/W2790918693","https://openalex.org/W2791879367","https://openalex.org/W2792450155","https://openalex.org/W2792716682","https://openalex.org/W2792736988","https://openalex.org/W2796394805","https://openalex.org/W2799943651","https://openalex.org/W2800394774","https://openalex.org/W2800557391","https://openalex.org/W2800695847","https://openalex.org/W2801888526","https://openalex.org/W2802074198","https://openalex.org/W2802988977","https://openalex.org/W2849849680","https://openalex.org/W2887506070","https://openalex.org/W3017143921","https://openalex.org/W3099258169","https://openalex.org/W3122507336","https://openalex.org/W4394668502","https://openalex.org/W6680300913","https://openalex.org/W6682398751","https://openalex.org/W6743976539","https://openalex.org/W6745796943","https://openalex.org/W6748205368","https://openalex.org/W6748573271","https://openalex.org/W6749284562","https://openalex.org/W6751547784","https://openalex.org/W6753066744","https://openalex.org/W6788793748","https://openalex.org/W6865210394"],"related_works":["https://openalex.org/W2795382384","https://openalex.org/W3202003292","https://openalex.org/W36091977","https://openalex.org/W4382794599","https://openalex.org/W2800331776","https://openalex.org/W2903602818","https://openalex.org/W2003791967","https://openalex.org/W2982912425","https://openalex.org/W3016048014","https://openalex.org/W4294976063"],"abstract_inverted_index":{"Malware":[0],"detection":[1,50,171],"is":[2,145],"an":[3,252,271],"increasingly":[4],"important":[5],"operational":[6],"focus":[7],"in":[8,34,42,122,163,179,275,293],"cyber":[9],"security,":[10],"particularly,":[11,184],"given":[12],"the":[13,36,46,94,107,120,125,130,139,160,205,214,238,249,260],"fast":[14],"pace":[15],"of":[16,38,48,93,111,132,141,195,199,204,216,224,248,255,273,282,286],"such":[17,189],"threats":[18],"(e.g.,":[19],"new":[20],"malware":[21,49,112,133,181,229,240,278],"variants":[22],"introduced":[23],"every":[24],"day).":[25],"In":[26,53,83],"recent":[27],"years,":[28],"there":[29],"has":[30],"been":[31],"increased":[32],"interest":[33],"exploring":[35],"use":[37,88],"machine":[39],"learning":[40],"techniques":[41],"automating":[43],"and":[44,51,90,102,109,157,227,234,259,284],"enhancing":[45],"effectiveness":[47,215],"analysis.":[52,236],"this":[54],"paper,":[55],"we":[56,87,98,242],"present":[57,244],"a":[58,65,72,75,166,245],"deep":[59],"recurrent":[60],"neural":[61],"network":[62,81],"solution":[63],"as":[64,74,190],"stacked":[66,126,262],"long":[67],"short-term":[68],"memory":[69],"(LSTM)":[70],"with":[71,169,280],"pre-training":[73],"regularization":[76],"method":[77,117,144,175,219,258,269],"to":[78,105,124,149,165,209],"avoid":[79,99],"random":[80,100],"initialization.":[82],"our":[84,142,217,256,267],"proposed":[85,116,174,218,257,268],"approach,":[86],"global":[89],"short":[91],"dependencies":[92],"inputs.":[95],"With":[96],"pre-training,":[97],"initialization":[101],"are":[103],"able":[104],"improve":[106],"accuracy":[108,272],"robustness":[110],"threat":[113,182],"hunting.":[114],"The":[115],"speeds":[118],"up":[119],"convergence,":[121],"comparison":[123,164],"LSTM,":[127],"by":[128],"reducing":[129],"length":[131],"OpCode":[134],"or":[135,193],"bytecode":[136],"sequences.":[137],"Hence,":[138],"complexity":[140],"final":[143],"reduced.":[146],"This":[147],"leads":[148],"better":[150],"accuracy,":[151],"higher":[152],"Mattews":[153],"Correlation":[154],"Coefficients":[155],"(MCC),":[156],"Area":[158],"Under":[159],"Curve":[161],"(AUC)":[162],"standard":[167,261,290],"LSTM":[168,263],"similar":[170],"time.":[172],"Our":[173],"can":[176],"be":[177],"applied":[178],"real-time":[180],"hunting,":[183],"for":[185],"safety":[186],"critical":[187],"systems,":[188],"electronic":[191],"health":[192],"Internet":[194,223],"Battlefield":[196],"/":[197],"Military":[198],"Things,":[200],"where":[201],"poor":[202],"convergence":[203],"model":[206],"could":[207],"lead":[208],"catastrophic":[210],"consequences.":[211],"We":[212],"evaluate":[213],"on":[220,251],"Windows,":[221],"Ransomware,":[222],"Things":[225],"(IoT),":[226],"Android":[228],"datasets":[230],"using":[231],"both":[232],"static":[233],"dynamic":[235],"For":[237],"IoT":[239,277],"detection,":[241],"also":[243],"comparative":[246],"summary":[247],"performance":[250],"IoT-specific":[253],"dataset":[254],"method.":[264],"More":[265],"specifically,":[266],"achieves":[270],"99.1%":[274],"detecting":[276],"samples,":[279],"AUC":[281],"0.985":[283],"MCC":[285],"0.95;":[287],"thus,":[288],"outperforming":[289],"LSTM-based":[291],"methods":[292],"these":[294],"key":[295],"metrics.":[296]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":17},{"year":2021,"cited_by_count":15},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}