{"id":"https://openalex.org/W4390317718","doi":"https://doi.org/10.1145/3638552","title":"Malware Detection with Artificial Intelligence: A Systematic Literature Review","display_name":"Malware Detection with Artificial Intelligence: A Systematic Literature Review","publication_year":2023,"publication_date":"2023-12-28","ids":{"openalex":"https://openalex.org/W4390317718","doi":"https://doi.org/10.1145/3638552"},"language":"en","primary_location":{"id":"doi:10.1145/3638552","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3638552","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3638552","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3638552","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101508012","display_name":"Matthew Gaber","orcid":"https://orcid.org/0000-0003-1684-1392"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Matthew G. Gaber","raw_affiliation_strings":["Edith Cowan University School of Science, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1684-1392","affiliations":[{"raw_affiliation_string":"Edith Cowan University School of Science, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101694896","display_name":"Mohiuddin Ahmed","orcid":"https://orcid.org/0000-0002-4559-4768"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohiuddin Ahmed","raw_affiliation_strings":["Edith Cowan University School of Science, Australia"],"raw_orcid":"https://orcid.org/0000-0002-4559-4768","affiliations":[{"raw_affiliation_string":"Edith Cowan University School of Science, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035745103","display_name":"Helge Janicke","orcid":"https://orcid.org/0000-0002-1345-2829"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Helge Janicke","raw_affiliation_strings":["Edith Cowan University School of Science, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1345-2829","affiliations":[{"raw_affiliation_string":"Edith Cowan University School of Science, Australia","institution_ids":["https://openalex.org/I12079687"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I12079687"],"apc_list":null,"apc_paid":null,"fwci":6.924,"has_fulltext":true,"cited_by_count":110,"citation_normalized_percentile":{"value":1.0,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"56","issue":"6","first_page":"1","last_page":"33"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8999310731887817},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8538198471069336},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6890001893043518},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.688008189201355},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6327080130577087},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.603217363357544},{"id":"https://openalex.org/keywords/sophistication","display_name":"Sophistication","score":0.5473343729972839},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5268750786781311},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5045672655105591},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.457878053188324},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.4536144733428955},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.43356454372406006},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3309793174266815},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20799633860588074}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8999310731887817},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8538198471069336},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6890001893043518},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.688008189201355},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6327080130577087},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.603217363357544},{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.5473343729972839},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5268750786781311},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5045672655105591},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.457878053188324},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.4536144733428955},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.43356454372406006},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3309793174266815},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20799633860588074},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3638552","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3638552","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3638552","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:ro.ecu.edu.au:ecuworks2022-2026-4707","is_oa":true,"landing_page_url":"https://ro.ecu.edu.au/ecuworks2022-2026/3706","pdf_url":null,"source":{"id":"https://openalex.org/S2765015692","display_name":"Australasian Journal of Paramedicine","issn_l":"2202-7270","issn":["2202-7270"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research outputs 2022 to 2026","raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3638552","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3638552","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3638552","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6499999761581421,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320988","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4390317718.pdf","grobid_xml":"https://content.openalex.org/works/W4390317718.grobid-xml"},"referenced_works_count":84,"referenced_works":["https://openalex.org/W92214286","https://openalex.org/W1573526548","https://openalex.org/W2115175195","https://openalex.org/W2620946705","https://openalex.org/W2732916693","https://openalex.org/W2744461761","https://openalex.org/W2747715470","https://openalex.org/W2792672492","https://openalex.org/W2793420030","https://openalex.org/W2798159728","https://openalex.org/W2805691298","https://openalex.org/W2861867928","https://openalex.org/W2885070483","https://openalex.org/W2900633536","https://openalex.org/W2921161567","https://openalex.org/W2931858311","https://openalex.org/W2944146009","https://openalex.org/W2945561205","https://openalex.org/W2947762055","https://openalex.org/W2954537660","https://openalex.org/W2956875759","https://openalex.org/W2959716986","https://openalex.org/W2972552958","https://openalex.org/W2988210345","https://openalex.org/W2990954041","https://openalex.org/W2996806689","https://openalex.org/W2997191565","https://openalex.org/W2998074434","https://openalex.org/W2999183294","https://openalex.org/W3002277530","https://openalex.org/W3003433587","https://openalex.org/W3003663951","https://openalex.org/W3004908285","https://openalex.org/W3006140559","https://openalex.org/W3006334803","https://openalex.org/W3014274353","https://openalex.org/W3014902384","https://openalex.org/W3023529621","https://openalex.org/W3031837342","https://openalex.org/W3035775076","https://openalex.org/W3040974506","https://openalex.org/W3045044533","https://openalex.org/W3081417472","https://openalex.org/W3081627837","https://openalex.org/W3089189066","https://openalex.org/W3108671495","https://openalex.org/W3114468998","https://openalex.org/W3116489514","https://openalex.org/W3117219787","https://openalex.org/W3122748539","https://openalex.org/W3124610607","https://openalex.org/W3127601194","https://openalex.org/W3161095254","https://openalex.org/W3167041328","https://openalex.org/W3178593045","https://openalex.org/W3183268685","https://openalex.org/W3194131055","https://openalex.org/W3201224956","https://openalex.org/W3206286092","https://openalex.org/W3208220695","https://openalex.org/W3214962084","https://openalex.org/W3215120663","https://openalex.org/W3217530273","https://openalex.org/W4200030734","https://openalex.org/W4210517283","https://openalex.org/W4225606056","https://openalex.org/W4226319939","https://openalex.org/W4280598028","https://openalex.org/W4283313119","https://openalex.org/W4284989899","https://openalex.org/W4285507391","https://openalex.org/W4285819700","https://openalex.org/W4286776272","https://openalex.org/W4292348401","https://openalex.org/W4292940448","https://openalex.org/W4296367487","https://openalex.org/W4300687693","https://openalex.org/W4311165836","https://openalex.org/W4312359447","https://openalex.org/W4324031786","https://openalex.org/W4360995074","https://openalex.org/W4381734429","https://openalex.org/W4385452929","https://openalex.org/W6839101208"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2128507946","https://openalex.org/W2728713145","https://openalex.org/W2131332603","https://openalex.org/W3125701821","https://openalex.org/W2470502009","https://openalex.org/W2072617132"],"abstract_inverted_index":{"In":[0,70],"this":[1,144],"survey,":[2],"we":[3],"review":[4],"the":[5,9,61,64,72,82,85,88,91,102],"key":[6],"developments":[7],"in":[8],"field":[10],"of":[11,29,54,63,76,84,90,105],"malware":[12,38,42,129],"detection":[13],"using":[14],"AI":[15,56],"and":[16,33,46,74,87,121,127],"analyze":[17],"core":[18],"challenges.":[19],"We":[20],"systematically":[21],"survey":[22],"state-of-the-art":[23],"methods":[24],"across":[25],"five":[26],"critical":[27],"aspects":[28],"building":[30],"an":[31,55],"accurate":[32],"robust":[34],"AI-powered":[35],"malware-detection":[36],"model:":[37],"sophistication,":[39],"analysis":[40,92,95,108],"techniques,":[41],"repositories,":[43],"feature":[44],"selection,":[45],"machine":[47],"learning":[48],"vs.":[49],"deep":[50],"learning.":[51],"The":[52],"effectiveness":[53],"model":[57,152],"is":[58,67,79,96,99,109,115,130],"dependent":[59,80],"on":[60,81],"quality":[62,73,83,142],"features":[65,78,136],"it":[66],"trained":[68],"with.":[69],"turn,":[71],"authenticity":[75],"these":[77],"dataset":[86],"suitability":[89],"tool.":[93],"Static":[94],"fast":[97],"but":[98,114],"limited":[100],"by":[101,112,117],"widespread":[103],"use":[104],"obfuscation.":[106],"Dynamic":[107],"not":[110],"impacted":[111],"obfuscation":[113],"defeated":[116],"ubiquitous":[118],"anti-analysis":[119],"techniques":[120],"requires":[122],"more":[123],"computational":[124],"power.":[125],"Sophisticated":[126],"evasive":[128],"challenging":[131],"to":[132,147],"extract":[133],"authentic":[134],"discriminatory":[135],"from":[137],"and,":[138],"combined":[139],"with":[140,156],"poor":[141],"datasets,":[143],"can":[145],"lead":[146],"a":[148,151],"situation":[149],"where":[150],"achieves":[153],"high":[154],"accuracy":[155],"only":[157],"one":[158],"specific":[159],"dataset.":[160]},"counts_by_year":[{"year":2026,"cited_by_count":35},{"year":2025,"cited_by_count":56},{"year":2024,"cited_by_count":19}],"updated_date":"2026-07-25T09:21:30.201066","created_date":"2025-10-10T00:00:00"}