{"id":"https://openalex.org/W2000034060","doi":"https://doi.org/10.1142/s0218001415500184","title":"An Ensemble Cost-Sensitive One-Class Learning Framework for Malware Detection","display_name":"An Ensemble Cost-Sensitive One-Class Learning Framework for Malware Detection","publication_year":2015,"publication_date":"2015-04-06","ids":{"openalex":"https://openalex.org/W2000034060","doi":"https://doi.org/10.1142/s0218001415500184","mag":"2000034060"},"language":"en","primary_location":{"id":"doi:10.1142/s0218001415500184","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218001415500184","pdf_url":null,"source":{"id":"https://openalex.org/S41486457","display_name":"International Journal of Pattern Recognition and Artificial Intelligence","issn_l":"0218-0014","issn":["0218-0014","1793-6381"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Pattern Recognition and Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100737835","display_name":"Jiachen Liu","orcid":"https://orcid.org/0000-0003-2317-1956"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jia-Chen Liu","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057494448","display_name":"Jianfeng Song","orcid":"https://orcid.org/0000-0002-7641-2170"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian-Feng Song","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007404362","display_name":"Qiguang Miao","orcid":"https://orcid.org/0000-0002-2872-388X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi-Guang Miao","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101444118","display_name":"Ying Cao","orcid":"https://orcid.org/0000-0003-2454-9092"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Cao","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058748737","display_name":"Yining Quan","orcid":"https://orcid.org/0009-0009-1319-2965"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi-Ning Quan","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, 2nd Taibai Road, Xi'an, Shaanxi, 710071, P. R. China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100737835"],"corresponding_institution_ids":["https://openalex.org/I149594827"],"apc_list":null,"apc_paid":null,"fwci":1.1488,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.783757,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"29","issue":"05","first_page":"1550018","last_page":"1550018"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8209457397460938},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7810894250869751},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7555073499679565},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6933101415634155},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.535024881362915},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.5269901156425476},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5103845000267029},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.48768603801727295},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.4825934171676636},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.48205146193504333},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.4548928141593933},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4357329308986664},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.42875349521636963},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38332024216651917},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.2734544277191162},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.11261272430419922}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8209457397460938},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7810894250869751},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7555073499679565},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6933101415634155},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.535024881362915},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.5269901156425476},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5103845000267029},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.48768603801727295},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.4825934171676636},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.48205146193504333},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.4548928141593933},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4357329308986664},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.42875349521636963},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38332024216651917},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2734544277191162},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11261272430419922},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218001415500184","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218001415500184","pdf_url":null,"source":{"id":"https://openalex.org/S41486457","display_name":"International Journal of Pattern Recognition and Artificial Intelligence","issn_l":"0218-0014","issn":["0218-0014","1793-6381"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Pattern Recognition and Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W62298501","https://openalex.org/W1567557924","https://openalex.org/W1851403712","https://openalex.org/W1965316859","https://openalex.org/W1970088130","https://openalex.org/W1983489915","https://openalex.org/W2005662348","https://openalex.org/W2029674613","https://openalex.org/W2056197329","https://openalex.org/W2065523990","https://openalex.org/W2079215333","https://openalex.org/W2100533862","https://openalex.org/W2118978333","https://openalex.org/W2121749752","https://openalex.org/W2127775588","https://openalex.org/W2132870739","https://openalex.org/W2133990480","https://openalex.org/W2135814109","https://openalex.org/W2148727298","https://openalex.org/W2150188172","https://openalex.org/W2150795982","https://openalex.org/W2151300580","https://openalex.org/W2170860445","https://openalex.org/W4232478844"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W2388600609","https://openalex.org/W3158472548","https://openalex.org/W4241610819","https://openalex.org/W4382934300","https://openalex.org/W2121061354","https://openalex.org/W4285388059","https://openalex.org/W2999368888","https://openalex.org/W2303304142"],"abstract_inverted_index":{"Machine":[0],"learning":[1,105],"is":[2,128],"among":[3],"the":[4,19,44,92,99,146,164,193],"most":[5,17],"popular":[6],"methods":[7,21,35],"in":[8,39,133,202],"designing":[9],"unknown":[10],"and":[11,43,54,123,131,156,179],"variant":[12],"malware":[13,41,68,100,122],"detection":[14,69,177],"algorithms.":[15],"However,":[16],"of":[18,26,51,91,117,167,204],"existing":[20],"take":[22],"a":[23,67,88,103,115,175,180],"single":[24],"type":[25],"features":[27,81],"to":[28,86,94,120,135,162],"build":[29],"binary":[30,45,137,188],"classifiers.":[31],"In":[32,62],"practice,":[33],"these":[34],"have":[36],"limited":[37],"ability":[38,166],"depicting":[40],"characteristics":[42],"classification":[46,189],"suffers":[47],"from":[48],"inadequate":[49],"sampling":[50],"benign":[52,124,147],"samples":[53,58,141],"extremely":[55,143],"imbalanced":[56,144,198],"training":[57,140],"when":[59,139,192],"detecting":[60],"malware.":[61],"this":[63],"paper,":[64],"we":[65],"present":[66],"Framework":[70],"based":[71],"on":[72],"ENsemble":[73],"One-Class":[74],"Learning,":[75],"namely":[76],"FENOC.":[77],"It":[78],"uses":[79,114],"hybrid":[80],"at":[82],"different":[83],"semantic":[84],"layers":[85],"ensure":[87],"comprehensive":[89],"insight":[90],"program":[93],"be":[95],"analyzed.":[96],"We":[97],"construct":[98],"detector":[101,194],"by":[102],"novel":[104],"algorithm":[106],"called":[107],"Cost-sensitive":[108],"Twin":[109],"One-class":[110],"Classifier":[111],"(CosTOC),":[112],"which":[113],"pair":[116],"one-class":[118],"classifiers":[119,138],"describe":[121],"programs":[125,148],"respectively.":[126],"CosTOC":[127],"more":[129],"flexible":[130],"robust":[132],"comparison":[134],"conventional":[136],"are":[142,149,160,195],"or":[145,200],"inadequately":[150],"sampled.":[151],"Finally,":[152],"random":[153],"subspace":[154],"method":[155,159],"clustering-based":[157],"ensemble":[158],"developed":[161],"enhance":[163],"generalization":[165],"CosTOC.":[168],"Experimental":[169],"results":[170],"show":[171],"that":[172],"FENOC":[173],"gives":[174],"comparative":[176],"rate":[178,184],"lower":[181],"false":[182,205],"positive":[183,206],"than":[185],"many":[186],"other":[187],"algorithms,":[190],"especially":[191],"trained":[196],"with":[197],"data,":[199],"evaluated":[201],"terms":[203],"rate.":[207]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}