{"id":"https://openalex.org/W4402594611","doi":"https://doi.org/10.1109/sds60720.2024.00017","title":"SecBox: a Lightweight Data Mining Platform for Dynamic and Reproducible Malware Analysis","display_name":"SecBox: a Lightweight Data Mining Platform for Dynamic and Reproducible Malware Analysis","publication_year":2024,"publication_date":"2024-05-30","ids":{"openalex":"https://openalex.org/W4402594611","doi":"https://doi.org/10.1109/sds60720.2024.00017"},"language":"en","primary_location":{"id":"doi:10.1109/sds60720.2024.00017","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/sds60720.2024.00017","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 11th IEEE Swiss Conference on Data Science (SDS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057255986","display_name":"Chao Feng","orcid":"https://orcid.org/0000-0002-0672-1090"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":true,"raw_author_name":"Chao Feng","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071602128","display_name":"Jan von der Assen","orcid":"https://orcid.org/0000-0002-0591-8887"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Jan Von Der Assen","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063531116","display_name":"Alberto Huertas Celdr\u00e1n","orcid":"https://orcid.org/0000-0001-7125-1710"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Alberto Huertas Celdran","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092241927","display_name":"Raffael Mogicato","orcid":null},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Raffael Mogicato","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092241926","display_name":"Adrian Zermin","orcid":null},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Adrian Zermin","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107293961","display_name":"Vichhay Ok","orcid":null},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Vichhay Ok","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070889566","display_name":"G\u00e9r\u00f4me Bovet","orcid":"https://orcid.org/0000-0002-4534-3483"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gerome Bovet","raw_affiliation_strings":["Cyber-Defence Campus, Armasuisse Science & Technology,Thun,Switzerland,CH-3602"],"affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, Armasuisse Science & Technology,Thun,Switzerland,CH-3602","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033030418","display_name":"Burkhard Stiller","orcid":"https://orcid.org/0000-0002-7461-7463"},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Burkhard Stiller","raw_affiliation_strings":["University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050"],"affiliations":[{"raw_affiliation_string":"University of Zurich UZH,Communication Systems Group CSG,Department of Informatics,Zurich,Switzerland,CH-8050","institution_ids":["https://openalex.org/I202697423"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5057255986"],"corresponding_institution_ids":["https://openalex.org/I202697423"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.16546534,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"6","issue":null,"first_page":"62","last_page":"67"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9782999753952026,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.965499997138977,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8268358707427979},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7415874004364014},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5037233233451843},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3122784495353699}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8268358707427979},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7415874004364014},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5037233233451843},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3122784495353699}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sds60720.2024.00017","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/sds60720.2024.00017","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 11th IEEE Swiss Conference on Data Science (SDS)","raw_type":"proceedings-article"},{"id":"pmh:doi:10.5167/uzh-262709","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","score":0.5400000214576721,"display_name":"Decent work and economic growth"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2111038628","https://openalex.org/W2140807364","https://openalex.org/W2150795982","https://openalex.org/W3048094199","https://openalex.org/W3048252966","https://openalex.org/W3162740817","https://openalex.org/W4206975705","https://openalex.org/W4212786013","https://openalex.org/W4226177265","https://openalex.org/W4247564058","https://openalex.org/W4290973134","https://openalex.org/W4292002667","https://openalex.org/W4381734429","https://openalex.org/W6755077424"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2768892939","https://openalex.org/W3164408430","https://openalex.org/W4285507391","https://openalex.org/W2397240470","https://openalex.org/W2602767565","https://openalex.org/W170652726","https://openalex.org/W2883822334","https://openalex.org/W2134874482"],"abstract_inverted_index":{"In":[0,18],"the":[1,5,19,29,89,124,139],"era":[2],"of":[3,7,91,126,145],"digitalization,":[4],"availability":[6],"data":[8],"is":[9,23,27],"paramount":[10],"for":[11,31],"any":[12],"scenario":[13],"that":[14],"requires":[15],"informed":[16],"decision-making.":[17],"cybersecurity":[20],"world,":[21],"this":[22,94],"no":[24],"different.":[25],"This":[26],"especially":[28],"case":[30],"malware":[32,36,73,82,116],"since,":[33],"even":[34],"though":[35],"samples":[37],"share":[38],"common":[39],"ancestors,":[40],"implementations":[41],"are":[42],"commonly":[43],"adapted":[44],"into":[45],"many":[46],"strains,":[47],"requiring":[48],"frequent":[49],"execution":[50],"and":[51,57,71,104,143],"analysis":[52],"to":[53,69,114],"implement":[54],"appropriate":[55],"detection":[56],"mitigation":[58],"mechanisms":[59],"based":[60],"on":[61,131],"malicious":[62],"patterns.Sandboxes":[63],"have":[64],"emerged":[65],"as":[66],"an":[67],"environment":[68],"execute":[70,115],"analyze":[72],"dynamically.":[74],"However,":[75],"existing":[76,118],"platforms":[77],"lack":[78],"real-time,":[79,110],"interactive,":[80],"reproducible":[81],"analysis.":[83],"Since":[84],"they":[85],"do":[86],"not":[87],"explore":[88],"applicability":[90],"container-based":[92,128],"isolation,":[93,141],"paper":[95],"proposes":[96],"SecBox.":[97],"To":[98],"extract":[99],"system":[100],"calls,":[101],"performance":[102],"metrics,":[103],"network":[105],"traffic,":[106],"SecBox":[107,134],"implements":[108],"a":[109],"visual,":[111],"easy-to-use":[112],"tool":[113],"from":[117],"sample":[119],"exchanges.":[120],"The":[121],"platform":[122],"explores":[123],"suitability":[125],"lightweight,":[127],"sandboxing.":[129],"Based":[130],"multiple":[132],"experiments,":[133],"achieves":[135],"good":[136],"results":[137],"regarding":[138],"performance,":[140],"reproducibility,":[142],"monitorability":[144],"malware.":[146]},"counts_by_year":[],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}