{"id":"https://openalex.org/W4415968398","doi":"https://doi.org/10.1109/tifs.2025.3630005","title":"Modeling and Mitigating Social Engineering Malware: Integrating Malware-Opinion Dynamics With Optimal Impulse Control Approaches","display_name":"Modeling and Mitigating Social Engineering Malware: Integrating Malware-Opinion Dynamics With Optimal Impulse Control Approaches","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415968398","doi":"https://doi.org/10.1109/tifs.2025.3630005"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3630005","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3630005","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/journal_contribution/Modeling_and_Mitigating_Social_Engineering_Malware_Integrating_Malware-_Opinion_Dynamics_with_Optimal_Impulse_Control_Approaches/30585752","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085139938","display_name":"Xiaojuan Cheng","orcid":"https://orcid.org/0000-0001-5977-3831"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiaojuan Cheng","raw_affiliation_strings":["Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, Australia","Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5977-3831","affiliations":[{"raw_affiliation_string":"Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, Australia","institution_ids":["https://openalex.org/I149704539"]},{"raw_affiliation_string":"Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012015574","display_name":"Lu\u2010Xing Yang","orcid":"https://orcid.org/0000-0002-9229-5787"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Lu-Xing Yang","raw_affiliation_strings":["Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, Australia","Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9229-5787","affiliations":[{"raw_affiliation_string":"Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, Australia","institution_ids":["https://openalex.org/I149704539"]},{"raw_affiliation_string":"Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100438769","display_name":"Gang Li","orcid":"https://orcid.org/0000-0003-1583-641X"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Gang Li","raw_affiliation_strings":["Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, Australia","Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1583-641X","affiliations":[{"raw_affiliation_string":"Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, Australia","institution_ids":["https://openalex.org/I149704539"]},{"raw_affiliation_string":"Deakin Cyber Research and Innovation Center, Deakin University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zenan Ma","orcid":"https://orcid.org/0009-0004-2732-8580"},"institutions":[{"id":"https://openalex.org/I10660446","display_name":"Kunming University of Science and Technology","ror":"https://ror.org/00xyeez13","country_code":"CN","type":"education","lineage":["https://openalex.org/I10660446"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zenan Ma","raw_affiliation_strings":["School of Information Engineering and Automation, Kunming University of Science and Technology, Kunming, China"],"raw_orcid":"https://orcid.org/0009-0004-2732-8580","affiliations":[{"raw_affiliation_string":"School of Information Engineering and Automation, Kunming University of Science and Technology, Kunming, China","institution_ids":["https://openalex.org/I10660446"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036801346","display_name":"Tianqing Zhu","orcid":"https://orcid.org/0000-0003-3411-7947"},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Tianqing Zhu","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macau, China"],"raw_orcid":"https://orcid.org/0000-0003-3411-7947","affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macau, China","institution_ids":["https://openalex.org/I6469544"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100640128","display_name":"Lidan Wang","orcid":"https://orcid.org/0000-0003-0730-4202"},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lidan Wang","raw_affiliation_strings":["College of Artificial Intelligence, Southwest University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0003-0730-4202","affiliations":[{"raw_affiliation_string":"College of Artificial Intelligence, Southwest University, Chongqing, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035048973","display_name":"Shukai Duan","orcid":"https://orcid.org/0000-0002-0040-3796"},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shukai Duan","raw_affiliation_strings":["College of Artificial Intelligence, Southwest University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-0040-3796","affiliations":[{"raw_affiliation_string":"College of Artificial Intelligence, Southwest University, Chongqing, China","institution_ids":["https://openalex.org/I142108993"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.915,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90610666,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"20","issue":null,"first_page":"12231","last_page":"12244"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3499999940395355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3499999940395355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.16279999911785126,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.08560000360012054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6819999814033508},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.623199999332428},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.564300000667572},{"id":"https://openalex.org/keywords/convergence","display_name":"Convergence (economics)","score":0.4456999897956848},{"id":"https://openalex.org/keywords/system-dynamics","display_name":"System dynamics","score":0.40400001406669617},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3718000054359436},{"id":"https://openalex.org/keywords/impulse-control","display_name":"Impulse control","score":0.33980000019073486},{"id":"https://openalex.org/keywords/social-dynamics","display_name":"Social dynamics","score":0.3359000086784363}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8104000091552734},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6819999814033508},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.623199999332428},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.564300000667572},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5065000057220459},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.4456999897956848},{"id":"https://openalex.org/C77405623","wikidata":"https://www.wikidata.org/wiki/Q598451","display_name":"System dynamics","level":2,"score":0.40400001406669617},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3718000054359436},{"id":"https://openalex.org/C3018727167","wikidata":"https://www.wikidata.org/wiki/Q6033829","display_name":"Impulse control","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C67469775","wikidata":"https://www.wikidata.org/wiki/Q304922","display_name":"Social dynamics","level":2,"score":0.3359000086784363},{"id":"https://openalex.org/C91575142","wikidata":"https://www.wikidata.org/wiki/Q1971426","display_name":"Optimal control","level":2,"score":0.3292999863624573},{"id":"https://openalex.org/C70836080","wikidata":"https://www.wikidata.org/wiki/Q837940","display_name":"Impulse (physics)","level":2,"score":0.3221000134944916},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.321399986743927},{"id":"https://openalex.org/C123757187","wikidata":"https://www.wikidata.org/wiki/Q9195957","display_name":"Network dynamics","level":2,"score":0.29019999504089355},{"id":"https://openalex.org/C79487989","wikidata":"https://www.wikidata.org/wiki/Q934680","display_name":"Vehicle dynamics","level":2,"score":0.28949999809265137},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.2648000121116638},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2581000030040741},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2558000087738037},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.251800000667572}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3630005","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3630005","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/30585752","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Modeling_and_Mitigating_Social_Engineering_Malware_Integrating_Malware-_Opinion_Dynamics_with_Optimal_Impulse_Control_Approaches/30585752","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/30585752","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Modeling_and_Mitigating_Social_Engineering_Malware_Integrating_Malware-_Opinion_Dynamics_with_Optimal_Impulse_Control_Approaches/30585752","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1973697585","https://openalex.org/W2063917507","https://openalex.org/W2606845378","https://openalex.org/W2769367994","https://openalex.org/W2788201401","https://openalex.org/W2904394492","https://openalex.org/W2906719522","https://openalex.org/W3000586685","https://openalex.org/W3006227687","https://openalex.org/W3096795391","https://openalex.org/W3098649191","https://openalex.org/W3126361829","https://openalex.org/W3129329982","https://openalex.org/W3130025725","https://openalex.org/W3156434375","https://openalex.org/W3209082252","https://openalex.org/W4210585158","https://openalex.org/W4210665256","https://openalex.org/W4247429666","https://openalex.org/W4249718967","https://openalex.org/W4292702379","https://openalex.org/W4294310888","https://openalex.org/W4309680282","https://openalex.org/W4312384093","https://openalex.org/W4377000467","https://openalex.org/W4379806039","https://openalex.org/W4382536371","https://openalex.org/W4386090462","https://openalex.org/W4387623768","https://openalex.org/W4388692295","https://openalex.org/W4392745530","https://openalex.org/W4392973501","https://openalex.org/W4394002372","https://openalex.org/W4395688020","https://openalex.org/W4399767004","https://openalex.org/W4400905215","https://openalex.org/W4400946433","https://openalex.org/W4402895806","https://openalex.org/W4404867383","https://openalex.org/W4406202106","https://openalex.org/W4409663759"],"related_works":[],"abstract_inverted_index":{"Social":[0],"engineering":[1,92],"malware,":[2],"which":[3,69,132],"exploits":[4],"both":[5,80],"technical":[6,23],"and":[7,14,51,84,107,122,129,144,164,177,193],"human":[8,25],"vulnerabilities,":[9,83],"presents":[10],"challenging":[11],"for":[12,114],"individuals":[13],"organizations.":[15],"However,":[16],"existing":[17],"studies":[18,29],"typically":[19],"focus":[20],"on":[21,139],"either":[22],"or":[24,30],"vulnerabilities":[26],"through":[27],"case":[28],"questionnaires,":[31],"ignoring":[32],"their":[33],"combined":[34,58],"importance":[35],"in":[36,182,198],"mitigating":[37],"such":[38],"threats.":[39],"This":[40,169],"study":[41,64],"pioneers":[42],"the":[43,53,77,127,172,190],"introduction":[44],"of":[45,82,131,174,196],"a":[46],"mathematical":[47],"model":[48],"to":[49],"analyze":[50],"mitigate":[52],"dynamics":[54,74],"associated":[55,166],"with":[56,167],"these":[57],"vulnerabilities.":[59],"To":[60],"achieve":[61,119,153],"this,":[62],"this":[63,95,120],"proposes":[65],"an":[66,99,124,154],"innovative":[67],"framework,":[68,96],"integrates":[70],"(a)":[71],"acoupled":[72],"malware-opinion":[73],"modelto":[75],"capture":[76],"interplay":[78],"between":[79],"types":[81],"(b)":[85],"anoptimal":[86],"impulse":[87,116],"control":[88,105,162],"approachto":[89],"strategically":[90],"mitigatingsocial":[91],"malware.":[93,168],"Within":[94],"we":[97],"define":[98],"optimization":[100],"problem,":[101],"aimed":[102],"at":[103],"balancing":[104],"costs":[106,163],"malware":[108],"severity.":[109],"We":[110],"derive":[111],"theoretical":[112],"conditions":[113],"optimal":[115,155],"strategies":[117,151],"that":[118,149,189],"balance":[121,156],"develop":[123],"iterative":[125],"algorithm,":[126],"convergence":[128],"scalability":[130],"have":[133],"been":[134],"empirically":[135],"validated.":[136],"Experimental":[137],"results":[138],"three":[140],"real-world":[141],"social":[142],"networks":[143,147],"synthetic":[145],"scale-free":[146],"demonstrate":[148],"our":[150],"consistently":[152],"by":[157],"minimizing":[158],"total":[159],"expenses,":[160],"including":[161],"losses":[165],"finding":[170],"underscores":[171],"effectiveness":[173],"routine":[175],"patching":[176],"ongoing":[178],"security":[179],"awareness":[180],"training":[181],"standard":[183],"cybersecurity":[184,208],"practices.":[185],"Further":[186],"experiments":[187],"indicate":[188],"strategic,":[191],"early,":[192],"frequent":[194],"deployment":[195],"patches":[197],"specific":[199],"scenarios":[200],"can":[201],"effectively":[202],"reduce":[203],"unnecessary":[204],"losses,":[205],"enhancing":[206],"overall":[207],"resilience.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-11-06T00:00:00"}