{"id":"https://openalex.org/W2984763267","doi":"https://doi.org/10.1145/3338840.3355684","title":"Malware classification for identifying author groups","display_name":"Malware classification for identifying author groups","publication_year":2019,"publication_date":"2019-09-24","ids":{"openalex":"https://openalex.org/W2984763267","doi":"https://doi.org/10.1145/3338840.3355684","mag":"2984763267"},"language":"en","primary_location":{"id":"doi:10.1145/3338840.3355684","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338840.3355684","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Conference on Research in Adaptive and Convergent Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038728451","display_name":"Jiwon Hong","orcid":"https://orcid.org/0000-0001-8664-3258"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jiwon Hong","raw_affiliation_strings":["Hanyang University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hanyang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100749216","display_name":"Sung-Jun Park","orcid":"https://orcid.org/0000-0002-7842-9582"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sung-Jun Park","raw_affiliation_strings":["Hanyang University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hanyang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037986152","display_name":"Taeri Kim","orcid":"https://orcid.org/0009-0009-2748-9735"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Taeri Kim","raw_affiliation_strings":["Hanyang University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hanyang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021287644","display_name":"Yung\u2010Kyun Noh","orcid":"https://orcid.org/0000-0002-6372-9267"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yung-Kyun Noh","raw_affiliation_strings":["Hanyang University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hanyang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100656150","display_name":"Sang\u2010Wook Kim","orcid":"https://orcid.org/0000-0002-6345-9084"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sang-Wook Kim","raw_affiliation_strings":["Hanyang University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hanyang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016740253","display_name":"Dongphil Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dongphil Kim","raw_affiliation_strings":["The Attached Institute of ETRI, Daejeon, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Attached Institute of ETRI, Daejeon, Republic of Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100728455","display_name":"Won-Ho Kim","orcid":"https://orcid.org/0000-0002-3711-9916"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Wonho Kim","raw_affiliation_strings":["The Attached Institute of ETRI, Daejeon, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Attached Institute of ETRI, Daejeon, Republic of Korea","institution_ids":["https://openalex.org/I142401562"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"169","last_page":"174"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.934944748878479},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7783411741256714},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5925487279891968},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5913992524147034},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5911985039710999},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.47650185227394104},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4574855864048004},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3853638172149658},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38300377130508423},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3685232996940613},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.15139073133468628}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.934944748878479},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7783411741256714},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5925487279891968},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5913992524147034},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5911985039710999},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.47650185227394104},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4574855864048004},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3853638172149658},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38300377130508423},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3685232996940613},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.15139073133468628}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3338840.3355684","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338840.3355684","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Conference on Research in Adaptive and Convergent Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7900000214576721,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1888005072","https://openalex.org/W1996975221","https://openalex.org/W2009086942","https://openalex.org/W2010065958","https://openalex.org/W2036575863","https://openalex.org/W2063898900","https://openalex.org/W2075715173","https://openalex.org/W2126401948","https://openalex.org/W2133299088","https://openalex.org/W2140190241","https://openalex.org/W2151135920","https://openalex.org/W2153409933","https://openalex.org/W2154851992","https://openalex.org/W2482374127","https://openalex.org/W2531563875","https://openalex.org/W2534728401","https://openalex.org/W2732916693","https://openalex.org/W2740196638","https://openalex.org/W2784097977","https://openalex.org/W2914961791","https://openalex.org/W3104097132","https://openalex.org/W3105705953"],"related_works":["https://openalex.org/W3024263644","https://openalex.org/W4226179412","https://openalex.org/W1594164630","https://openalex.org/W3008439545","https://openalex.org/W3199715035","https://openalex.org/W2080854948","https://openalex.org/W2380747180","https://openalex.org/W30585751","https://openalex.org/W1604607099","https://openalex.org/W2096712814"],"abstract_inverted_index":{"As":[0],"our":[1,111],"lives":[2],"become":[3],"increasingly":[4],"dependent":[5],"on":[6,105],"computer":[7],"software,":[8],"the":[9,20,27,55,128,134,137],"threat":[10],"of":[11,42,58,73,87,119,136],"malware":[12,25,89],"attacks":[13],"is":[14],"getting":[15],"greater.":[16],"By":[17],"slightly":[18],"modifying":[19],"previous":[21],"version":[22],"to":[23,83,98],"avoid":[24],"detection,":[26],"attackers":[28],"can":[29,62],"continuously":[30],"release":[31],"new":[32],"malwares":[33,37,120],"with":[34],"ease.":[35],"However,":[36],"released":[38],"by":[39,54],"a":[40,80,106],"group":[41,57,117],"authors":[43],"might":[44],"contain":[45],"some":[46],"evidence":[47],"among":[48],"them":[49],"that":[50],"they":[51],"are":[52],"developed":[53],"same":[56],"authors.":[59],"Such":[60],"information":[61],"be":[63],"used":[64],"for":[65],"digital":[66],"forensics,":[67],"law":[68],"enforcement,":[69],"and":[70],"deeper":[71],"analysis":[72],"malwares.":[74],"In":[75,91],"this":[76],"paper,":[77],"we":[78,93,109],"propose":[79,94],"graph-based":[81,112],"approach":[82],"classify":[84],"author":[85,116],"groups":[86],"given":[88],"samples.":[90],"addition,":[92],"graph":[95,130],"refinement":[96,131],"strategies":[97,132],"improve":[99],"classification":[100,113,118],"accuracies.":[101],"Via":[102],"extensive":[103],"experiments":[104],"real-world":[107],"dataset,":[108],"verify":[110,127],"could":[114],"benefit":[115],"than":[121],"traditional":[122],"feature-based":[123],"SVM.":[124],"We":[125],"also":[126],"proposed":[129],"increase":[133],"accuracy":[135],"classification.":[138]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}