{"id":"https://openalex.org/W4415748173","doi":"https://doi.org/10.1109/tnse.2025.3627147","title":"MalCAFF: A Cross Attention-Based Feature Fusion Framework for Malware Classification","display_name":"MalCAFF: A Cross Attention-Based Feature Fusion Framework for Malware Classification","publication_year":2025,"publication_date":"2025-10-31","ids":{"openalex":"https://openalex.org/W4415748173","doi":"https://doi.org/10.1109/tnse.2025.3627147"},"language":null,"primary_location":{"id":"doi:10.1109/tnse.2025.3627147","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3627147","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Wenjie Guo","orcid":"https://orcid.org/0009-0004-8544-4686"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjie Guo","raw_affiliation_strings":["School of Computer Science, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-8544-4686","affiliations":[{"raw_affiliation_string":"School of Computer Science, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingjing Hu","orcid":"https://orcid.org/0000-0002-3220-621X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingjing Hu","raw_affiliation_strings":["School of Computer Science, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3220-621X","affiliations":[{"raw_affiliation_string":"School of Computer Science, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yong Wang","orcid":"https://orcid.org/0000-0002-1572-068X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Wang","raw_affiliation_strings":["School of Computer Science, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1572-068X","affiliations":[{"raw_affiliation_string":"School of Computer Science, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089632319","display_name":"Yifeng Fu","orcid":"https://orcid.org/0000-0001-7783-8766"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifeng Fu","raw_affiliation_strings":["School of Computer Science, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046818119","display_name":"Jingfeng Xue","orcid":"https://orcid.org/0000-0002-3087-9701"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingfeng Xue","raw_affiliation_strings":["School of Computer Science, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101635898","display_name":"Baokun Zheng","orcid":"https://orcid.org/0000-0003-3333-9281"},"institutions":[{"id":"https://openalex.org/I177955009","display_name":"China University of Political Science and Law","ror":"https://ror.org/00e49gy82","country_code":"CN","type":"education","lineage":["https://openalex.org/I177955009"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baokun Zheng","raw_affiliation_strings":["School of Information Management for Law, China University of Political Science and Law, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3333-9281","affiliations":[{"raw_affiliation_string":"School of Information Management for Law, China University of Political Science and Law, Beijing, China","institution_ids":["https://openalex.org/I177955009"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.35791863,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"4294","last_page":"4311"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6658999919891357},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6545000076293945},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5673999786376953},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.5669999718666077},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5472000241279602},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.44909998774528503},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4368000030517578},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4296000003814697},{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.3986000120639801}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.848800003528595},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6658999919891357},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6545000076293945},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5673999786376953},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.5669999718666077},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5472000241279602},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.44909998774528503},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44589999318122864},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.439300000667572},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4368000030517578},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4296000003814697},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.3986000120639801},{"id":"https://openalex.org/C2776190703","wikidata":"https://www.wikidata.org/wiki/Q488148","display_name":"Slicing","level":2,"score":0.39149999618530273},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.38519999384880066},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.3815000057220459},{"id":"https://openalex.org/C91071405","wikidata":"https://www.wikidata.org/wiki/Q1413145","display_name":"Program slicing","level":3,"score":0.36629998683929443},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.36059999465942383},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3441999852657318},{"id":"https://openalex.org/C2779628075","wikidata":"https://www.wikidata.org/wiki/Q1253258","display_name":"Downgrade","level":2,"score":0.3361999988555908},{"id":"https://openalex.org/C158525013","wikidata":"https://www.wikidata.org/wiki/Q2593739","display_name":"Fusion","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C33954974","wikidata":"https://www.wikidata.org/wiki/Q486494","display_name":"Sensor fusion","level":2,"score":0.32350000739097595},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30959999561309814},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.30149999260902405},{"id":"https://openalex.org/C197129107","wikidata":"https://www.wikidata.org/wiki/Q1921621","display_name":"Merge (version control)","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.2750999927520752},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25949999690055847}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnse.2025.3627147","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3627147","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G135574341","display_name":null,"funder_award_id":"62172042","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":86,"referenced_works":["https://openalex.org/W83212619","https://openalex.org/W1965667542","https://openalex.org/W1971139551","https://openalex.org/W2044751544","https://openalex.org/W2055716572","https://openalex.org/W2061922307","https://openalex.org/W2092483417","https://openalex.org/W2141109493","https://openalex.org/W2147088720","https://openalex.org/W2194775991","https://openalex.org/W2557513839","https://openalex.org/W2564494760","https://openalex.org/W2618599501","https://openalex.org/W2788919350","https://openalex.org/W2890092828","https://openalex.org/W2901689459","https://openalex.org/W2909482470","https://openalex.org/W2914373984","https://openalex.org/W2917661079","https://openalex.org/W2926178846","https://openalex.org/W2961099251","https://openalex.org/W2969904462","https://openalex.org/W2972552958","https://openalex.org/W2997915791","https://openalex.org/W2998010923","https://openalex.org/W3006140559","https://openalex.org/W3007993592","https://openalex.org/W3112173953","https://openalex.org/W3117219787","https://openalex.org/W3205886849","https://openalex.org/W4210756680","https://openalex.org/W4212847133","https://openalex.org/W4221112654","https://openalex.org/W4226402968","https://openalex.org/W4282929420","https://openalex.org/W4283214123","https://openalex.org/W4285586654","https://openalex.org/W4288072399","https://openalex.org/W4292820477","https://openalex.org/W4309892485","https://openalex.org/W4312250728","https://openalex.org/W4317796249","https://openalex.org/W4360969865","https://openalex.org/W4365801590","https://openalex.org/W4383340358","https://openalex.org/W4384129390","https://openalex.org/W4384948606","https://openalex.org/W4384948684","https://openalex.org/W4384948718","https://openalex.org/W4385076171","https://openalex.org/W4385080397","https://openalex.org/W4385245566","https://openalex.org/W4385270032","https://openalex.org/W4385286624","https://openalex.org/W4386022701","https://openalex.org/W4386189887","https://openalex.org/W4387234384","https://openalex.org/W4388407860","https://openalex.org/W4388502409","https://openalex.org/W4388706355","https://openalex.org/W4390225955","https://openalex.org/W4390317718","https://openalex.org/W4390603899","https://openalex.org/W4391744351","https://openalex.org/W4391848405","https://openalex.org/W4392303153","https://openalex.org/W4394744483","https://openalex.org/W4396941482","https://openalex.org/W4399412051","https://openalex.org/W4399490421","https://openalex.org/W4399560918","https://openalex.org/W4400314713","https://openalex.org/W4402305591","https://openalex.org/W4402350838","https://openalex.org/W4402473949","https://openalex.org/W4403915899","https://openalex.org/W4403996327","https://openalex.org/W4404914697","https://openalex.org/W4408248601","https://openalex.org/W4409136361","https://openalex.org/W4409560755","https://openalex.org/W4410808519","https://openalex.org/W4412722558","https://openalex.org/W4412795944","https://openalex.org/W4414123601","https://openalex.org/W4416260549"],"related_works":[],"abstract_inverted_index":{"Malware":[0],"detection":[1],"faces":[2],"growing":[3],"challenges":[4],"due":[5],"to":[6,55],"sophisticated":[7],"obfuscation":[8],"techniques":[9],"that":[10,114],"undermine":[11],"the":[12,110],"robustness":[13],"of":[14,40],"single-modal":[15],"approaches":[16],"relying":[17],"solely":[18],"on":[19,109],"static":[20,41,81],"code":[21],"analysis":[22],"or":[23],"dynamic":[24,45,60],"behavioral":[25],"profiling.":[26],"To":[27],"address":[28],"this":[29],"issue,":[30],"we":[31],"propose":[32],"MalCAFF,":[33],"a":[34],"cross-attention-based":[35],"framework":[36],"for":[37],"fine-grained":[38],"fusion":[39],"assembly":[42],"semantics":[43],"and":[44,104],"API":[46,65,72],"behaviors.":[47],"Static":[48],"features":[49],"are":[50,62],"refined":[51],"through":[52],"program":[53],"slicing":[54],"preserve":[56],"critical":[57],"semantics,":[58],"while":[59],"behaviors":[61],"represented":[63],"by":[64],"Semantic":[66],"Block":[67],"Sequence":[68],"(ABS),":[69],"which":[70],"aggregate":[71],"calls":[73],"into":[74],"parameter-aware,":[75],"semantically":[76],"enriched":[77],"units":[78],"aligned":[79],"with":[80],"functions.":[82],"A":[83],"Cross":[84],"Attention-based":[85],"Feature":[86],"Enhancement":[87],"(CAFE)":[88],"module":[89],"then":[90],"achieves":[91],"bidirectional":[92],"semantic":[93],"complementation":[94],"across":[95],"modalities.":[96],"Furthermore,":[97],"contrastive":[98],"pre-training":[99],"mitigates":[100],"inter-modal":[101],"distributional":[102],"discrepancies":[103],"enhances":[105],"generalization.":[106],"Extensive":[107],"experiments":[108],"VirusShare":[111],"dataset":[112],"demonstrate":[113],"MalCAFF":[115],"outperforms":[116],"state-of-the-art":[117],"methods.":[118]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-31T00:00:00"}