{"id":"https://openalex.org/W3009252109","doi":"https://doi.org/10.1145/3328778.3372576","title":"A Hands-On Lab for Macro Malware Detection using Machine Learning on Virtual Machines","display_name":"A Hands-On Lab for Macro Malware Detection using Machine Learning on Virtual Machines","publication_year":2020,"publication_date":"2020-02-25","ids":{"openalex":"https://openalex.org/W3009252109","doi":"https://doi.org/10.1145/3328778.3372576","mag":"3009252109"},"language":"en","primary_location":{"id":"doi:10.1145/3328778.3372576","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3328778.3372576","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3328778.3372576","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 51st ACM Technical Symposium on Computer Science Education","raw_type":"proceedings-article"},"type":"conference-abstract","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3328778.3372576","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085923839","display_name":"Dan Lo","orcid":"https://orcid.org/0000-0003-4396-0370"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan C. Lo","raw_affiliation_strings":["Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064200922","display_name":"Ruth Bearden","orcid":null},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruth Bearden","raw_affiliation_strings":["Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047411215","display_name":"Deepa Muralidhar","orcid":"https://orcid.org/0000-0002-1000-9135"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Deepa Muralidhar","raw_affiliation_strings":["Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052820694","display_name":"Hossain Shahriar","orcid":"https://orcid.org/0000-0003-1021-7986"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hossain Shahriar","raw_affiliation_strings":["Kennesaw State Univeristy, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State Univeristy, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100344551","display_name":"Wei Chen","orcid":"https://orcid.org/0000-0003-1709-1191"},"institutions":[{"id":"https://openalex.org/I75256744","display_name":"Tennessee State University","ror":"https://ror.org/01fpczx89","country_code":"US","type":"education","lineage":["https://openalex.org/I75256744"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Chen","raw_affiliation_strings":["Tennessee State University, Nashville, TN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee State University, Nashville, TN, USA","institution_ids":["https://openalex.org/I75256744"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025378730","display_name":"P. Paschos","orcid":null},"institutions":[{"id":"https://openalex.org/I74234424","display_name":"Chicago State University","ror":"https://ror.org/05ekwbr88","country_code":"US","type":"education","lineage":["https://openalex.org/I74234424"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pascal Paschos","raw_affiliation_strings":["Chicago State University, Chicago, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chicago State University, Chicago, IL, USA","institution_ids":["https://openalex.org/I74234424"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065500219","display_name":"Chung Ng","orcid":null},"institutions":[{"id":"https://openalex.org/I85230861","display_name":"Morehouse College","ror":"https://ror.org/02y9g2b52","country_code":"US","type":"education","lineage":["https://openalex.org/I85230861"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chung Ng","raw_affiliation_strings":["Morehouse College, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Morehouse College, Atlanta, GA, USA","institution_ids":["https://openalex.org/I85230861"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1275","last_page":"1275"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.98580002784729,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9623000025749207,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8501142859458923},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.806542158126831},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.7167125940322876},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.6657170653343201},{"id":"https://openalex.org/keywords/installation","display_name":"Installation","score":0.6480914354324341},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6386398673057556},{"id":"https://openalex.org/keywords/macro","display_name":"Macro","score":0.6038855314254761},{"id":"https://openalex.org/keywords/virtual-laboratory","display_name":"Virtual Laboratory","score":0.4909653961658478},{"id":"https://openalex.org/keywords/virtual-lab","display_name":"Virtual lab","score":0.4818914532661438},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4274140000343323},{"id":"https://openalex.org/keywords/virtual-learning-environment","display_name":"Virtual learning environment","score":0.42162880301475525},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3875769376754761},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3627418875694275},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3624727725982666},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.32277628779411316},{"id":"https://openalex.org/keywords/multimedia","display_name":"Multimedia","score":0.3126363754272461}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8501142859458923},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.806542158126831},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.7167125940322876},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.6657170653343201},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.6480914354324341},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6386398673057556},{"id":"https://openalex.org/C166955791","wikidata":"https://www.wikidata.org/wiki/Q629579","display_name":"Macro","level":2,"score":0.6038855314254761},{"id":"https://openalex.org/C2777609615","wikidata":"https://www.wikidata.org/wiki/Q2527919","display_name":"Virtual Laboratory","level":2,"score":0.4909653961658478},{"id":"https://openalex.org/C2987664944","wikidata":"https://www.wikidata.org/wiki/Q7312158","display_name":"Virtual lab","level":2,"score":0.4818914532661438},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4274140000343323},{"id":"https://openalex.org/C66699896","wikidata":"https://www.wikidata.org/wiki/Q2349394","display_name":"Virtual learning environment","level":2,"score":0.42162880301475525},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3875769376754761},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3627418875694275},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3624727725982666},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32277628779411316},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.3126363754272461},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3328778.3372576","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3328778.3372576","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3328778.3372576","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 51st ACM Technical Symposium on Computer Science Education","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3328778.3372576","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3328778.3372576","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3328778.3372576","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 51st ACM Technical Symposium on Computer Science Education","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4525402201","display_name":"Collaborative Research: Real World Relevant Security Labware  for Mobile Threat Analysis and Protection Experience","funder_award_id":"1636995","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4662879116","display_name":"Collaborative Research: Broadening Secure Mobile Software Development (SMSD) Through Curriculum and Faculty Development","funder_award_id":"1723586","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5443583872","display_name":"Collaborative Research: Broadening Secure Mobile Software Development (SMSD) Through Curriculum and Faculty Development","funder_award_id":"1723578","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6161202997","display_name":"Collaborative Research:  Enhancing Curriculum and Faculty Development on Information Assurance and Security through Real World Relevant Portable Laboratory","funder_award_id":"1623724","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3009252109.pdf","grobid_xml":"https://content.openalex.org/works/W3009252109.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2372485077","https://openalex.org/W2021654422","https://openalex.org/W1934364953","https://openalex.org/W1997798481","https://openalex.org/W2889845777","https://openalex.org/W3126737580","https://openalex.org/W2097684710","https://openalex.org/W4352992071","https://openalex.org/W1967922324","https://openalex.org/W3009088796"],"abstract_inverted_index":{"We":[0],"developed":[1],"a":[2,25],"hands-on":[3],"lab":[4,114],"for":[5,68,77,106],"students":[6,61,93],"to":[7,54,85],"learn":[8],"macro":[9],"malware":[10],"detection":[11],"using":[12],"decision":[13],"trees":[14],"on":[15,24,96],"an":[16,102],"open":[17],"sourced":[18],"data":[19],"analytics":[20],"software,":[21],"HPCC,":[22],"running":[23],"virtual":[26,72,99,130],"machine.":[27,131],"The":[28,71],"labware":[29],"along":[30],"with":[31],"required":[32,80],"software":[33,66,81],"and":[34,49,79,83,89,126],"documents":[35],"are":[36,94],"freely":[37],"available":[38],"at":[39],"our":[40],"project":[41],"website.":[42],"Our":[43,57],"design":[44,115],"is":[45],"low":[46],"cost,":[47],"customizable":[48],"can":[50,116],"be":[51,118],"easily":[52],"replicated":[53],"other":[55],"institutions.":[56],"experience":[58],"shows":[59],"that":[60],"have":[62],"difficulties":[63],"in":[64],"configuring":[65],"environment":[67,105],"the":[69,98,128],"lab.":[70],"machine":[73,100],"approach":[74],"allows":[75],"pre-configurations":[76],"datasets":[78],"installations":[82],"setting":[84],"facilitate":[86],"students'":[87],"learning":[88],"instructors'":[90],"teaching.":[91],"Since":[92],"working":[95],"malware,":[97],"provides":[101],"isolated":[103],"network":[104],"testing":[107],"without":[108],"affecting":[109],"normal":[110],"operating":[111],"network.":[112],"This":[113],"also":[117],"integrated":[119],"into":[120],"online":[121],"courses":[122],"by":[123],"simply":[124],"downloading":[125],"installing":[127],"customized":[129]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}