{"id":"https://openalex.org/W2016975161","doi":"https://doi.org/10.1145/2713579.2713585","title":"HRS","display_name":"HRS","publication_year":2015,"publication_date":"2015-02-23","ids":{"openalex":"https://openalex.org/W2016975161","doi":"https://doi.org/10.1145/2713579.2713585","mag":"2016975161"},"language":"en","primary_location":{"id":"doi:10.1145/2713579.2713585","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2713579.2713585","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2713585&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 ACM International Workshop on International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=2713585&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073517860","display_name":"Zhentan Feng","orcid":null},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhentan Feng","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017399618","display_name":"Shuguang Xiong","orcid":null},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuguang Xiong","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070864998","display_name":"Deqiang Cao","orcid":null},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Deqiang Cao","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101052050","display_name":"Xiaolu Deng","orcid":null},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolu Deng","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100328092","display_name":"Xin Wang","orcid":"https://orcid.org/0000-0003-2131-5194"},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Wang","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100397616","display_name":"Yang Yang","orcid":"https://orcid.org/0000-0002-5070-4511"},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Yang","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078528016","display_name":"Xiaobo Zhou","orcid":"https://orcid.org/0000-0002-0466-7609"},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaobo Zhou","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100715216","display_name":"Yan Huang","orcid":"https://orcid.org/0000-0002-7925-4841"},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Huang","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004271621","display_name":"Guangzhu Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangzhu Wu","raw_affiliation_strings":["Baidu Inc., Beijing, China","Baidu. Inc, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Inc., Beijing, China","institution_ids":["https://openalex.org/I98301712"]},{"raw_affiliation_string":"Baidu. Inc, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5073517860"],"corresponding_institution_ids":["https://openalex.org/I98301712"],"apc_list":null,"apc_paid":null,"fwci":0.8697,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.74131385,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"19","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7118498682975769},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6817491054534912},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6707388758659363},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5964834094047546},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.5540103316307068},{"id":"https://openalex.org/keywords/false-discovery-rate","display_name":"False discovery rate","score":0.5397677421569824},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5173777341842651},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.47353193163871765},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.4607478380203247},{"id":"https://openalex.org/keywords/word-error-rate","display_name":"Word error rate","score":0.45818769931793213},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4347436726093292},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38835954666137695},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34340691566467285},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.18262788653373718},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.07990345358848572}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7118498682975769},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6817491054534912},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6707388758659363},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5964834094047546},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.5540103316307068},{"id":"https://openalex.org/C193244246","wikidata":"https://www.wikidata.org/wiki/Q5432696","display_name":"False discovery rate","level":3,"score":0.5397677421569824},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5173777341842651},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.47353193163871765},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.4607478380203247},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.45818769931793213},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4347436726093292},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38835954666137695},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34340691566467285},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.18262788653373718},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.07990345358848572},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2713579.2713585","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2713579.2713585","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2713585&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 ACM International Workshop on International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/2713579.2713585","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2713579.2713585","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2713585&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 ACM International Workshop on International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2016975161.pdf","grobid_xml":"https://content.openalex.org/works/W2016975161.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W199319018","https://openalex.org/W1528210002","https://openalex.org/W1973211701","https://openalex.org/W1973403081","https://openalex.org/W1996350342","https://openalex.org/W2011039300","https://openalex.org/W2034938003","https://openalex.org/W2042742130","https://openalex.org/W2043128754","https://openalex.org/W2044660163","https://openalex.org/W2056197329","https://openalex.org/W2059342086","https://openalex.org/W2079215333","https://openalex.org/W2121749752","https://openalex.org/W2123504579","https://openalex.org/W2129650357","https://openalex.org/W2144083192","https://openalex.org/W2144112223","https://openalex.org/W2150188172","https://openalex.org/W2152442131","https://openalex.org/W2466512847","https://openalex.org/W4237640996","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W1975357770","https://openalex.org/W2020413892","https://openalex.org/W2128909276","https://openalex.org/W1991225657","https://openalex.org/W1825621501","https://openalex.org/W101962219","https://openalex.org/W256699647","https://openalex.org/W2389124870","https://openalex.org/W2093463665","https://openalex.org/W2102122784"],"abstract_inverted_index":{"Traditional":[0],"signature-based":[1],"detection":[2,14],"methods":[3,12],"fail":[4],"to":[5,18,86,102,123,155],"detect":[6,124],"unknown":[7,126],"malwares,":[8,140],"while":[9,117],"data":[10],"mining":[11],"for":[13,23,43],"are":[15,62],"proved":[16],"useful":[17],"new":[19],"malwares":[20,84],"but":[21],"suffer":[22],"high":[24],"false":[25,104],"positive":[26,174],"rate.":[27],"In":[28],"this":[29],"paper,":[30],"we":[31],"provide":[32],"a":[33,65,111,172],"novel":[34],"hybrid":[35,66,97],"framework":[36,67],"called":[37],"HRS":[38,68,158,170,185],"based":[39,160],"on":[40,161],"the":[41,60,87,92,96,108,121,125,135,139,145,157,162,166],"analysis":[42],"50":[44],"millions":[45],"of":[46,59,73,83,95,110,138,176,182],"malware":[47,51],"samples":[48,61],"across":[49],"20,000":[50],"classes":[52,82],"from":[53,80],"our":[54,192],"antivirus":[55],"platform.":[56,194],"The":[57,128,184],"distribution":[58],"elaborated":[63],"and":[64,76,147,165],"is":[69,91,100,131],"proposed,":[70],"which":[71,141],"consists":[72],"Hash-based,":[74],"Rule-based":[75,89],"SVM-based":[77,129],"models":[78],"trained":[79],"different":[81],"according":[85],"distribution.":[88],"model":[90],"core":[93],"component":[94],"framework.":[98],"It":[99],"convenient":[101],"control":[103],"positives":[105],"by":[106,133],"adjusting":[107],"factor":[109],"boolean":[112],"expression":[113],"in":[114],"rule-based":[115],"method,":[116],"it":[118],"still":[119],"has":[120,187],"ability":[122],"malwares.":[127],"method":[130,186],"enhanced":[132],"examining":[134],"critical":[136],"sections":[137],"can":[142],"significantly":[143],"shorten":[144],"scanning":[146],"training":[148],"time.":[149],"Rigorous":[150],"experiments":[151],"have":[152],"been":[153,189],"performed":[154],"evaluate":[156],"approach":[159],"massive":[163],"dataset":[164],"results":[167],"demonstrate":[168],"that":[169],"achieves":[171],"true":[173],"rate":[175,181],"99.84%":[177],"with":[178],"an":[179],"error":[180],"0.17%.":[183],"already":[188],"deployed":[190],"into":[191],"security":[193]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2020,"cited_by_count":5},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-06-02T09:04:35.204637","created_date":"2016-06-24T00:00:00"}