{"id":"https://openalex.org/W1984368900","doi":"https://doi.org/10.1145/2660267.2662365","title":"POSTER","display_name":"POSTER","publication_year":2014,"publication_date":"2014-11-03","ids":{"openalex":"https://openalex.org/W1984368900","doi":"https://doi.org/10.1145/2660267.2662365","mag":"1984368900"},"language":"en","primary_location":{"id":"doi:10.1145/2660267.2662365","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2660267.2662365","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077436101","display_name":"Hesham Mekky","orcid":null},"institutions":[{"id":"https://openalex.org/I130238516","display_name":"University of Minnesota","ror":"https://ror.org/017zqws13","country_code":"US","type":"education","lineage":["https://openalex.org/I130238516"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hesham Mekky","raw_affiliation_strings":["University of Minnesota, Minneapolis, MN, USA",", University of Minnesota, Minneapolis, MN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Minnesota, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I130238516"]},{"raw_affiliation_string":", University of Minnesota, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I130238516"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077402873","display_name":"Aziz Mohaisen","orcid":"https://orcid.org/0000-0003-3227-2505"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aziz Mohaisen","raw_affiliation_strings":["VeriSign Labs, Reston, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VeriSign Labs, Reston, VA, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100622097","display_name":"Zhi-Li Zhang","orcid":"https://orcid.org/0000-0001-8584-2319"},"institutions":[{"id":"https://openalex.org/I130238516","display_name":"University of Minnesota","ror":"https://ror.org/017zqws13","country_code":"US","type":"education","lineage":["https://openalex.org/I130238516"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhi-Li Zhang","raw_affiliation_strings":["University of Minnesota, Minneapolis, MN, USA",", University of Minnesota, Minneapolis, MN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Minnesota, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I130238516"]},{"raw_affiliation_string":", University of Minnesota, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I130238516"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1478","last_page":"1480"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9900000095367432,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9139277935028076},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7568907141685486},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.6225097179412842},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5510460138320923},{"id":"https://openalex.org/keywords/traffic-signal","display_name":"Traffic signal","score":0.5288805961608887},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5282223224639893},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.512122631072998},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4976561367511749},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4239880442619324},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.28586310148239136},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.14062055945396423}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9139277935028076},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7568907141685486},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.6225097179412842},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5510460138320923},{"id":"https://openalex.org/C2987419075","wikidata":"https://www.wikidata.org/wiki/Q8004","display_name":"Traffic signal","level":2,"score":0.5288805961608887},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5282223224639893},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.512122631072998},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4976561367511749},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4239880442619324},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28586310148239136},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.14062055945396423},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2660267.2662365","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2660267.2662365","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2238183428","display_name":null,"funder_award_id":"CNS-1017092","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G6232082772","display_name":null,"funder_award_id":"CNS-10171647","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G6604001399","display_name":null,"funder_award_id":"CRI-1305237","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G8974516987","display_name":null,"funder_award_id":"CNS-1117536","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"}],"funders":[{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W94487276","https://openalex.org/W1581009051","https://openalex.org/W1974189812","https://openalex.org/W2084979543","https://openalex.org/W2108384452","https://openalex.org/W2137964233","https://openalex.org/W2141224535","https://openalex.org/W2143426320","https://openalex.org/W2240887954","https://openalex.org/W2911964244","https://openalex.org/W4310638450"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W2249809453","https://openalex.org/W3152891574","https://openalex.org/W4316881845"],"abstract_inverted_index":{"Malware":[0],"families":[1],"classification":[2,19,85],"has":[3],"been":[4],"studied":[5],"extensively":[6],"in":[7,68],"the":[8,22,27,50,57,72,91,96,103,106],"literature.":[9],"Machine":[10],"learning":[11],"based":[12],"identification":[13],"techniques":[14,86],"rely":[15],"on":[16,90],"building":[17],"a":[18],"model":[20,28],"for":[21,31],"malware":[23,37,78,92],"traffic,":[24,82],"and":[25,80,83],"then":[26,84],"is":[29,41,60],"used":[30],"labeling":[32],"unseen":[33],"observations.":[34],"In":[35],"practice,":[36],"traffic":[38,46,59,74,79,93],"(malware":[39],"signal)":[40],"mixed":[42],"with":[43],"other":[44],"legitimate":[45],"(background":[47],"signal).":[48],"Consequently,":[49],"classifier's":[51],"effectiveness":[52,104],"may":[53],"be":[54],"hindered,":[55],"since":[56],"observed":[58,73],"mixed.":[61],"We":[62],"propose":[63],"to":[64,70],"apply":[65],"signal":[66],"decomposition":[67],"order":[69],"decompose":[71],"into":[75],"two":[76],"components,":[77],"background":[81,97],"are":[87],"applied":[88],"effectively":[89],"after":[94],"removing":[95],"attributes.":[98],"Our":[99],"preliminary":[100],"results":[101],"show":[102],"of":[105],"proposed":[107],"approach.":[108]},"counts_by_year":[{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2016-06-24T00:00:00"}