{"id":"https://openalex.org/W4405304483","doi":"https://doi.org/10.1109/tifs.2024.3516565","title":"MalFSCIL: A Few-Shot Class-Incremental Learning Approach for Malware Detection","display_name":"MalFSCIL: A Few-Shot Class-Incremental Learning Approach for Malware Detection","publication_year":2024,"publication_date":"2024-12-12","ids":{"openalex":"https://openalex.org/W4405304483","doi":"https://doi.org/10.1109/tifs.2024.3516565"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3516565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3516565","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006545795","display_name":"Yuhan Chai","orcid":"https://orcid.org/0000-0003-4332-0234"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhan Chai","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-4332-0234","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001397831","display_name":"X. R. Chen","orcid":"https://orcid.org/0000-0002-7238-9620"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ximing Chen","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-7238-9620","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057638577","display_name":"Jing Qiu","orcid":"https://orcid.org/0000-0003-4202-7802"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Qiu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-4202-7802","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034996492","display_name":"Lei Du","orcid":"https://orcid.org/0009-0000-4175-1693"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Du","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0000-4175-1693","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078883262","display_name":"Yanjun Xiao","orcid":"https://orcid.org/0000-0003-3299-9069"},"institutions":[{"id":"https://openalex.org/I4210113138","display_name":"Guangzhou Automobile Group (China)","ror":"https://ror.org/026fzn952","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210113138"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjun Xiao","raw_affiliation_strings":["PINGXING Lab (Nsfocus Technology Group Company), Guangzhou, Guangdong, China","PINGXING Lab (Nsfocus Technology Group Company), Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"PINGXING Lab (Nsfocus Technology Group Company), Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I4210113138"]},{"raw_affiliation_string":"PINGXING Lab (Nsfocus Technology Group Company), Guangdong, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101648731","display_name":"Qiying Feng","orcid":"https://orcid.org/0000-0001-9842-2452"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiying Feng","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-4268-372X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056608045","display_name":"Zhihong Tian","orcid":"https://orcid.org/0000-0002-9409-5359"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Tian","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-9409-5359","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.818,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.97409536,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"20","issue":null,"first_page":"2999","last_page":"3014"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9869999885559082,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9855999946594238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8560000061988831},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7433115839958191},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.6425739526748657},{"id":"https://openalex.org/keywords/shot","display_name":"Shot (pellet)","score":0.6416866183280945},{"id":"https://openalex.org/keywords/one-shot","display_name":"One shot","score":0.5328640937805176},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.529617428779602},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34566524624824524},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2501370906829834}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8560000061988831},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7433115839958191},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.6425739526748657},{"id":"https://openalex.org/C2778344882","wikidata":"https://www.wikidata.org/wiki/Q278938","display_name":"Shot (pellet)","level":2,"score":0.6416866183280945},{"id":"https://openalex.org/C2992734406","wikidata":"https://www.wikidata.org/wiki/Q413267","display_name":"One shot","level":2,"score":0.5328640937805176},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.529617428779602},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34566524624824524},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2501370906829834},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3516565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3516565","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4868500656","display_name":null,"funder_award_id":"U24A20336","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6148742176","display_name":null,"funder_award_id":"62272114","funder_id":"https://openalex.org/F4320329293","funder_display_name":"Data Center of Management Science, National Natural Science Foundation of China - Peking University"},{"id":"https://openalex.org/G7609744423","display_name":null,"funder_award_id":"62272114","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8876304254","display_name":null,"funder_award_id":"2022ZD0119602","funder_id":"https://openalex.org/F4320329860","funder_display_name":"National Science and Technology Major Project"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320329293","display_name":"Data Center of Management Science, National Natural Science Foundation of China - Peking University","ror":null},{"id":"https://openalex.org/F4320329860","display_name":"National Science and Technology Major Project","ror":null},{"id":"https://openalex.org/F4320335920","display_name":"Natural Science Foundation of Nantong University","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W1821462560","https://openalex.org/W1967185446","https://openalex.org/W2020184885","https://openalex.org/W2079215333","https://openalex.org/W2194775991","https://openalex.org/W2301473744","https://openalex.org/W2754462941","https://openalex.org/W2790484531","https://openalex.org/W2884282566","https://openalex.org/W2964189064","https://openalex.org/W2969985801","https://openalex.org/W2974865449","https://openalex.org/W3004280948","https://openalex.org/W3008022637","https://openalex.org/W3019875810","https://openalex.org/W3025067198","https://openalex.org/W3035342403","https://openalex.org/W3035501943","https://openalex.org/W3089833773","https://openalex.org/W3096805028","https://openalex.org/W3111533025","https://openalex.org/W3127455599","https://openalex.org/W3128341305","https://openalex.org/W3153387614","https://openalex.org/W3173170122","https://openalex.org/W3174868646","https://openalex.org/W3175270254","https://openalex.org/W3175294706","https://openalex.org/W3175771944","https://openalex.org/W3176779063","https://openalex.org/W3177494822","https://openalex.org/W3178593045","https://openalex.org/W3211529384","https://openalex.org/W4206739656","https://openalex.org/W4210345192","https://openalex.org/W4226134030","https://openalex.org/W4285140062","https://openalex.org/W4290996451","https://openalex.org/W4311415873","https://openalex.org/W4312327301","https://openalex.org/W4312408104","https://openalex.org/W4313028293","https://openalex.org/W4319442612","https://openalex.org/W4381233012","https://openalex.org/W4388019121","https://openalex.org/W4388624483","https://openalex.org/W4389169163","https://openalex.org/W4390045019","https://openalex.org/W4394862626","https://openalex.org/W6680294583","https://openalex.org/W6736057607","https://openalex.org/W6755318597","https://openalex.org/W6790939575","https://openalex.org/W6851529039"],"related_works":["https://openalex.org/W2497720472","https://openalex.org/W4292659306","https://openalex.org/W3044321615","https://openalex.org/W2806221744","https://openalex.org/W2326937258","https://openalex.org/W394267150","https://openalex.org/W2773965352","https://openalex.org/W4294892107","https://openalex.org/W2357748469","https://openalex.org/W2392917037"],"abstract_inverted_index":{"The":[0],"continuous":[1,122],"evolution":[2,78],"of":[3,73,79,107,129,184],"malware":[4,34,80,201],"is":[5,45,133],"posing":[6],"a":[7,142,156,162,171],"serious":[8],"threat":[9],"to":[10,29,32,47,53,68,70,165,180],"personal":[11],"privacy,":[12],"enterprise":[13,214],"data":[14],"security,":[15],"and":[16,50,76,169,203,212],"global":[17],"network":[18],"infrastructure.":[19],"For":[20],"example,":[21],"attackers":[22],"can":[23],"use":[24],"phishing":[25],"emails,":[26],"botnets,":[27],"etc.":[28],"induce":[30],"victims":[31],"execute":[33],"for":[35],"nefarious":[36],"purposes":[37],"such":[38],"as":[39,90],"stealing":[40],"sensitive":[41],"information.":[42],"Therefore,":[43],"it":[44],"significant":[46],"develop":[48],"effective":[49],"efficient":[51,92],"methods":[52,60],"detect":[54],"malware.":[55],"Towards":[56],"this,":[57],"most":[58],"state-of-the-art":[59,198],"are":[61],"focused":[62],"on":[63,148,177],"learning-based":[64],"method.":[65],"In":[66],"order":[67],"adapt":[69],"the":[71,105,126,130,137,193,197],"characteristics":[72],"sample":[74],"scarcity":[75],"dynamic":[77,172],"detection":[81,145,202],"tasks,":[82],"few-shot":[83],"class":[84,178],"incremental":[85,115,124,185],"learning":[86],"has":[87],"been":[88],"proposed":[89,194],"an":[91],"pairwise":[93],"solution.":[94],"Nevertheless,":[95],"they":[96],"still":[97],"face":[98],"two":[99],"major":[100],"challenges:":[101],"1)":[102],"Catastrophic":[103],"Forgetting:":[104],"erosion":[106],"existing":[108],"knowledge":[109,113],"by":[110],"newly":[111],"acquired":[112],"during":[114],"learning.":[116],"2)":[117],"Decision":[118],"boundary":[119,173],"confusion:":[120],"after":[121],"multiple":[123],"sessions,":[125],"discriminative":[127],"ability":[128],"classification":[131,204,207],"model":[132],"weakened.":[134],"To":[135],"address":[136],"above":[138],"challenges,":[139],"we":[140],"propose":[141],"new":[143],"Malware":[144],"framework":[146],"based":[147,176],"Few-Shot":[149],"Class":[150],"Incremental":[151],"Learning,":[152],"MalFSCIL,":[153],"which":[154],"utilizes":[155],"decoupled":[157],"training":[158],"strategy":[159],"combined":[160],"with":[161,205,209],"variational":[163],"autocoder":[164],"mitigate":[166],"catastrophic":[167],"forgetting,":[168],"designs":[170],"delineation":[174,183],"method":[175,195],"prototyping":[179],"achieve":[181],"accurate":[182],"decision":[186],"boundaries.":[187],"Extensive":[188],"experimental":[189],"results":[190],"show":[191],"that":[192],"outperforms":[196],"techniques":[199],"in":[200],"high":[206],"accuracy":[208],"open-source":[210],"dataset":[211],"Internal":[213],"dataset.":[215]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":17}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}