{"id":"https://openalex.org/W4400409965","doi":"https://doi.org/10.1109/tnsm.2024.3424565","title":"CAG-Malconv: A Byte-Level Malware Detection Method With CBAM and Attention-GRU","display_name":"CAG-Malconv: A Byte-Level Malware Detection Method With CBAM and Attention-GRU","publication_year":2024,"publication_date":"2024-07-08","ids":{"openalex":"https://openalex.org/W4400409965","doi":"https://doi.org/10.1109/tnsm.2024.3424565"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2024.3424565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2024.3424565","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045170959","display_name":"Xi Luo","orcid":"https://orcid.org/0000-0003-2620-6376"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Luo","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071285652","display_name":"Honghui Fan","orcid":"https://orcid.org/0009-0009-0868-1684"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Honghui Fan","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-0868-1684","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100411650","display_name":"Lihua Yin","orcid":"https://orcid.org/0000-0001-8829-4442"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8829-4442","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101824334","display_name":"Shijie Jia","orcid":"https://orcid.org/0000-0002-4262-9478"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shijie Jia","raw_affiliation_strings":["Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4262-9478","affiliations":[{"raw_affiliation_string":"Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090818485","display_name":"Kaiyan Zhao","orcid":"https://orcid.org/0009-0004-8665-5813"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kaiyan Zhao","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0004-8665-5813","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067387192","display_name":"Hongyu Yang","orcid":"https://orcid.org/0009-0006-0719-8605"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyu Yang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0006-0719-8605","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6893,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.84586425,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"21","issue":"5","first_page":"5859","last_page":"5872"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9692999720573425,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.8996188640594482},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6498362421989441},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5511474609375},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37020695209503174},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.33836764097213745},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3162139654159546},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24460208415985107}],"concepts":[{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.8996188640594482},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6498362421989441},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5511474609375},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37020695209503174},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.33836764097213745},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3162139654159546},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24460208415985107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2024.3424565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2024.3424565","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2997352541","display_name":null,"funder_award_id":"No. 2022YFB3104100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7522771362","display_name":null,"funder_award_id":"No. 62102109","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1604135736","https://openalex.org/W1893133781","https://openalex.org/W1902237438","https://openalex.org/W1947535385","https://openalex.org/W1981229864","https://openalex.org/W1998188341","https://openalex.org/W2055716572","https://openalex.org/W2075715173","https://openalex.org/W2133564696","https://openalex.org/W2135814109","https://openalex.org/W2164163973","https://openalex.org/W2508015754","https://openalex.org/W2531260576","https://openalex.org/W2581313255","https://openalex.org/W2734713605","https://openalex.org/W2905912674","https://openalex.org/W2964199361","https://openalex.org/W3008326802","https://openalex.org/W3009850146","https://openalex.org/W3016048014","https://openalex.org/W3020428476","https://openalex.org/W3047103688","https://openalex.org/W3091621850","https://openalex.org/W3175941285","https://openalex.org/W4221112654","https://openalex.org/W4283067758","https://openalex.org/W4286572122","https://openalex.org/W4289752563","https://openalex.org/W4300687693","https://openalex.org/W4367595786","https://openalex.org/W6679434410","https://openalex.org/W6679896073","https://openalex.org/W6745899033","https://openalex.org/W6750318962"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W2249809453"],"abstract_inverted_index":{"With":[0],"the":[1,52,56,139,150,156],"rise":[2],"of":[3,58,115,134,152,159],"generative":[4],"artificial":[5],"intelligence,":[6],"malware":[7,18,177],"creation":[8],"has":[9],"become":[10],"more":[11],"accessible,":[12],"leading":[13],"to":[14,26,41,102],"a":[15,78],"surge":[16],"in":[17,43,132,172],"and":[19,39,46,96,119,129,144,165],"its":[20],"variants.":[21],"Traditional":[22],"detection":[23],"methods":[24,124],"struggle":[25],"keep":[27],"pace":[28],"with":[29,112],"this":[30],"evolution.":[31],"Dynamic":[32],"analysis,":[33,50],"though":[34],"detailed,":[35],"is":[36],"resource":[37],"intensive":[38],"susceptible":[40],"variations":[42],"computer":[44],"hardware":[45],"simulation":[47],"environments.":[48],"Static":[49],"on":[51,84,109,126],"other":[53],"hand,":[54],"faces":[55],"challenge":[57],"discerning":[59],"valuable":[60],"features":[61,128],"from":[62],"an":[63],"extensive":[64],"pool,":[65],"especially":[66],"for":[67,149],"software":[68],"across":[69],"diverse":[70],"architectures.":[71],"To":[72],"tackle":[73],"these":[74],"issues,":[75],"we":[76],"propose":[77],"binary":[79],"sample":[80],"classification":[81],"approach":[82],"based":[83,125],"raw":[85,130,153],"bytes,":[86],"named":[87],"CAG-Malconv,":[88],"which":[89],"incorporates":[90],"Convolutional":[91],"Block":[92],"Attention":[93],"Module":[94],"(CBAM)":[95],"Bidirectional":[97],"Gated":[98],"Recurrent":[99],"Unit":[100],"(BiGRU)":[101],"extract":[103],"byte-level":[104],"features.":[105],"We":[106],"evaluated":[107],"it":[108,147],"two":[110],"datasets":[111],"48,000":[113],"samples":[114],"different":[116],"file":[117],"types":[118],"families.":[120],"It":[121],"outperforms":[122],"state-of-the-art":[123],"advanced":[127],"bytes":[131],"terms":[133],"accuracy":[135],"(ACC),":[136],"Area":[137],"Under":[138],"Curve":[140],"(AUC),":[141],"F1":[142],"score,":[143],"recall.":[145],"Furthermore,":[146],"allows":[148],"visualization":[151],"samples,":[154],"facilitating":[155],"precise":[157],"identification":[158],"malicious":[160],"components":[161],"like":[162],"C&C":[163],"URLs":[164],"encryption":[166],"loops":[167],"by":[168],"analyzing":[169],"activation":[170],"patterns":[171],"hidden":[173],"layers,":[174],"thus":[175],"streamlining":[176],"investigative":[178],"procedures.":[179]},"counts_by_year":[{"year":2025,"cited_by_count":6}],"updated_date":"2025-12-26T23:08:49.675405","created_date":"2025-10-10T00:00:00"}