{"id":"https://openalex.org/W2889245790","doi":"https://doi.org/10.1145/3231053.3231097","title":"Disguised executable files in spear-phishing emails","display_name":"Disguised executable files in spear-phishing emails","publication_year":2018,"publication_date":"2018-06-26","ids":{"openalex":"https://openalex.org/W2889245790","doi":"https://doi.org/10.1145/3231053.3231097","mag":"2889245790"},"language":"en","primary_location":{"id":"doi:10.1145/3231053.3231097","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3231053.3231097","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Conference on Future Networks and Distributed Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055981395","display_name":"Ibrahim Ghafir","orcid":"https://orcid.org/0000-0003-3702-3866"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ","GB"],"is_corresponding":false,"raw_author_name":"Ibrahim Ghafir","raw_affiliation_strings":["Masaryk University, Brno, Czech Republic and Durham University, Durham, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University, Brno, Czech Republic and Durham University, Durham, UK","institution_ids":["https://openalex.org/I190082696","https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027360900","display_name":"V\u00e1clav P\u0159enosil","orcid":"https://orcid.org/0000-0002-3867-9990"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Vaclav Prenosil","raw_affiliation_strings":["Masaryk University, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University, Brno, Czech Republic","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089637331","display_name":"Mohammad Hammoudeh","orcid":"https://orcid.org/0000-0003-1058-0996"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohammad Hammoudeh","raw_affiliation_strings":["Manchester Metropolitan University, Manchester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manchester Metropolitan University, Manchester, UK","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043400886","display_name":"Francisco J. Aparicio\u2010Navarro","orcid":"https://orcid.org/0000-0002-1511-7805"},"institutions":[{"id":"https://openalex.org/I84884186","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70","country_code":"GB","type":"education","lineage":["https://openalex.org/I84884186"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Francisco J. Aparicio-Navarro","raw_affiliation_strings":["Newcastle University, Newcastle upon Tyne, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Newcastle University, Newcastle upon Tyne, UK","institution_ids":["https://openalex.org/I84884186"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030692615","display_name":"Khaled M. Rabie","orcid":"https://orcid.org/0000-0002-9784-3703"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Khaled Rabie","raw_affiliation_strings":["Manchester Metropolitan University, Manchester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manchester Metropolitan University, Manchester, UK","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073771956","display_name":"Ahmad Jabban","orcid":null},"institutions":[{"id":"https://openalex.org/I28221208","display_name":"Institut National des Sciences Appliqu\u00e9es de Rennes","ror":"https://ror.org/04xaa4j22","country_code":"FR","type":"education","lineage":["https://openalex.org/I28221208"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Ahmad Jabban","raw_affiliation_strings":["Univ Rennes, INSA Rennes, Rennes, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ Rennes, INSA Rennes, Rennes, France","institution_ids":["https://openalex.org/I28221208","https://openalex.org/I56067802"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5833,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.83070283,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8173961639404297},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7863180637359619},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7176793813705444},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6812080144882202},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.584618330001831},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4727937877178192},{"id":"https://openalex.org/keywords/social-engineering","display_name":"Social engineering (security)","score":0.4451180100440979},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.27146875858306885},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2223752737045288}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8173961639404297},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7863180637359619},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7176793813705444},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6812080144882202},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.584618330001831},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4727937877178192},{"id":"https://openalex.org/C70118762","wikidata":"https://www.wikidata.org/wiki/Q376934","display_name":"Social engineering (security)","level":2,"score":0.4451180100440979},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.27146875858306885},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2223752737045288}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3231053.3231097","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3231053.3231097","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Conference on Future Networks and Distributed Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:www.dora.dmu.ac.uk:2086/17131","is_oa":false,"landing_page_url":"http://hdl.handle.net/2086/17131","pdf_url":null,"source":{"id":"https://openalex.org/S4306400394","display_name":"DMU Open Research Archive (De Montfort University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66943878","host_organization_name":"De Montfort University","host_organization_lineage":["https://openalex.org/I66943878"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/12","score":0.4099999964237213,"display_name":"Responsible consumption and production"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W59369888","https://openalex.org/W1489073918","https://openalex.org/W1516506771","https://openalex.org/W1534677508","https://openalex.org/W1642882198","https://openalex.org/W1976413307","https://openalex.org/W1981294881","https://openalex.org/W2007887768","https://openalex.org/W2042952667","https://openalex.org/W2155011304","https://openalex.org/W2180696299","https://openalex.org/W2182819203","https://openalex.org/W2185537293","https://openalex.org/W2258636546","https://openalex.org/W2261803129","https://openalex.org/W2286303343","https://openalex.org/W2288747313","https://openalex.org/W2290880970","https://openalex.org/W2314121694","https://openalex.org/W2318852830","https://openalex.org/W2403652205","https://openalex.org/W2405388621","https://openalex.org/W2486441280","https://openalex.org/W2501070846","https://openalex.org/W2501259350","https://openalex.org/W2526787500","https://openalex.org/W2545820541","https://openalex.org/W2560932476","https://openalex.org/W2564838878","https://openalex.org/W2565792304","https://openalex.org/W2596503800","https://openalex.org/W2731865152","https://openalex.org/W2746443561","https://openalex.org/W2766725984","https://openalex.org/W2784786388","https://openalex.org/W2789823311","https://openalex.org/W2792615346","https://openalex.org/W2793129310","https://openalex.org/W2795164731","https://openalex.org/W2962901589"],"related_works":["https://openalex.org/W1995118279","https://openalex.org/W4240624848","https://openalex.org/W2944809083","https://openalex.org/W3159552247","https://openalex.org/W4229025036","https://openalex.org/W2737752763","https://openalex.org/W2572193563","https://openalex.org/W4391182755","https://openalex.org/W2765340726","https://openalex.org/W4283826021"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"cyber":[3,34],"attacks":[4],"have":[5],"caused":[6],"substantial":[7],"financial":[8],"losses":[9],"and":[10,39,49,156,166],"been":[11],"able":[12],"to":[13,32,67,82,94],"stop":[14],"fundamental":[15],"public":[16],"services.":[17],"Among":[18],"the":[19,33,55,68,79,97,101,107,122,138,149,153,157,167],"serious":[20],"attacks,":[21],"Advanced":[22],"Persistent":[23],"Threat":[24],"(APT)":[25],"has":[26],"emerged":[27],"as":[28],"a":[29,62,84,146,170],"big":[30],"challenge":[31],"security":[35],"hitting":[36],"selected":[37],"companies":[38],"organisations.":[40],"The":[41,141],"main":[42],"objectives":[43],"of":[44,54,64,103,152,173],"APT":[45,56],"are":[46],"data":[47],"exfiltration":[48],"intelligence":[50],"appropriation.":[51],"As":[52],"part":[53],"life":[57],"cycle,":[58],"an":[59],"attacker":[60],"creates":[61],"Point":[63],"Entry":[65],"(PoE)":[66],"target":[69],"network.":[70],"This":[71,119,161],"is":[72,106,143],"usually":[73],"achieved":[74],"by":[75],"installing":[76],"malware":[77],"on":[78,145],"targeted":[80],"machine":[81],"leave":[83],"back-door":[85],"open":[86],"for":[87],"future":[88],"access.":[89],"A":[90],"common":[91],"technique":[92],"employed":[93],"breach":[95],"into":[96],"network,":[98],"which":[99,129],"involves":[100],"use":[102],"social":[104],"engineering,":[105],"spear":[108],"phishing":[109,112],"email.":[110],"These":[111],"emails":[113],"may":[114],"contain":[115],"disguised":[116,123,133,174],"executable":[117,124,175],"files.":[118,176],"paper":[120],"presents":[121],"file":[125,155,158],"detection":[126,142,172],"(DeFD)":[127],"module,":[128],"aims":[130],"at":[131],"detecting":[132],"exe":[134],"files":[135],"transferred":[136,154],"over":[137],"network":[139],"connections.":[140],"based":[144],"comparison":[147],"between":[148],"MIME":[150],"type":[151],"name":[159],"extension.":[160],"module":[162],"was":[163],"experimentally":[164],"evaluated":[165],"results":[168],"show":[169],"successful":[171]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":5},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}