{"id":"https://openalex.org/W4400553160","doi":"https://doi.org/10.1145/3677374","title":"A Comprehensive Analysis of Explainable AI for Malware Hunting","display_name":"A Comprehensive Analysis of Explainable AI for Malware Hunting","publication_year":2024,"publication_date":"2024-07-11","ids":{"openalex":"https://openalex.org/W4400553160","doi":"https://doi.org/10.1145/3677374"},"language":"en","primary_location":{"id":"doi:10.1145/3677374","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3677374","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007148284","display_name":"Mohd Saqib","orcid":"https://orcid.org/0000-0003-2125-2162"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohd Saqib","raw_affiliation_strings":["School of Information Studies, McGill University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2125-2162","affiliations":[{"raw_affiliation_string":"School of Information Studies, McGill University, Montreal, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015629053","display_name":"Samaneh Mahdavifar","orcid":"https://orcid.org/0000-0001-7040-659X"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Samaneh Mahdavifar","raw_affiliation_strings":["School of Information Studies, McGill University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0001-7040-659X","affiliations":[{"raw_affiliation_string":"School of Information Studies, McGill University, Montreal, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021788449","display_name":"Benjamin C. M. Fung","orcid":"https://orcid.org/0000-0001-8423-2906"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Benjamin C. M. Fung","raw_affiliation_strings":["School of Information Studies, McGill University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0001-8423-2906","affiliations":[{"raw_affiliation_string":"School of Information Studies, McGill University, Montreal, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052958340","display_name":"Philippe Charland","orcid":"https://orcid.org/0000-0003-4051-9942"},"institutions":[{"id":"https://openalex.org/I1297460800","display_name":"Defence Research and Development Canada","ror":"https://ror.org/00hgy8d33","country_code":"CA","type":"government","lineage":["https://openalex.org/I1297460800","https://openalex.org/I1336338359","https://openalex.org/I2802286613"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Philippe Charland","raw_affiliation_strings":["Mission Critical Cyber Security Section, Defence Research and Development Canada Valcartier, Quebec City, Canada"],"raw_orcid":"https://orcid.org/0000-0003-4051-9942","affiliations":[{"raw_affiliation_string":"Mission Critical Cyber Security Section, Defence Research and Development Canada Valcartier, Quebec City, Canada","institution_ids":["https://openalex.org/I1297460800"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.9038,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":{"value":0.98780238,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"56","issue":"12","first_page":"1","last_page":"40"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.876718282699585},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8237634301185608},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5412927865982056},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48368602991104126},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41859036684036255},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.40495938062667847}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.876718282699585},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8237634301185608},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5412927865982056},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48368602991104126},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41859036684036255},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.40495938062667847}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3677374","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3677374","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:escholarship.mcgill.ca:1831cr38d","is_oa":false,"landing_page_url":"https://escholarship.mcgill.ca/concern/articles/1831cr38d","pdf_url":null,"source":{"id":"https://openalex.org/S4306401568","display_name":"eScholarship@McGill (McGill)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I5023651","host_organization_name":"McGill University","host_organization_lineage":["https://openalex.org/I5023651"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1145/3677374","raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.800000011920929}],"awards":[{"id":"https://openalex.org/G4396674442","display_name":null,"funder_award_id":"CRC-2019-00041","funder_id":"https://openalex.org/F4320320994","funder_display_name":"Canada Research Chairs"}],"funders":[{"id":"https://openalex.org/F4320320994","display_name":"Canada Research Chairs","ror":"https://ror.org/0517h6h17"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":148,"referenced_works":["https://openalex.org/W1584149519","https://openalex.org/W1584505081","https://openalex.org/W1661167618","https://openalex.org/W1827822366","https://openalex.org/W1916732574","https://openalex.org/W1971911274","https://openalex.org/W1996975221","https://openalex.org/W2002016471","https://openalex.org/W2010065958","https://openalex.org/W2028727337","https://openalex.org/W2033857234","https://openalex.org/W2037109870","https://openalex.org/W2038296020","https://openalex.org/W2056107175","https://openalex.org/W2067878879","https://openalex.org/W2076063813","https://openalex.org/W2080157505","https://openalex.org/W2099425933","https://openalex.org/W2100151287","https://openalex.org/W2100550848","https://openalex.org/W2111216264","https://openalex.org/W2120418828","https://openalex.org/W2121317260","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2129639577","https://openalex.org/W2144112223","https://openalex.org/W2148542813","https://openalex.org/W2154529672","https://openalex.org/W2169205464","https://openalex.org/W2261354734","https://openalex.org/W2282821441","https://openalex.org/W2324760271","https://openalex.org/W2539582590","https://openalex.org/W2568998043","https://openalex.org/W2591788621","https://openalex.org/W2612186685","https://openalex.org/W2734718015","https://openalex.org/W2744536417","https://openalex.org/W2751702350","https://openalex.org/W2765921396","https://openalex.org/W2766733482","https://openalex.org/W2770942607","https://openalex.org/W2775261393","https://openalex.org/W2776884785","https://openalex.org/W2784097977","https://openalex.org/W2791879367","https://openalex.org/W2797652130","https://openalex.org/W2890850111","https://openalex.org/W2891503716","https://openalex.org/W2912083425","https://openalex.org/W2912135847","https://openalex.org/W2914373984","https://openalex.org/W2914630606","https://openalex.org/W2921573932","https://openalex.org/W2926178846","https://openalex.org/W2944012984","https://openalex.org/W2958992432","https://openalex.org/W2962772482","https://openalex.org/W2962802821","https://openalex.org/W2962849096","https://openalex.org/W2963707011","https://openalex.org/W2964088652","https://openalex.org/W2972552958","https://openalex.org/W2982596671","https://openalex.org/W2990671699","https://openalex.org/W2996806689","https://openalex.org/W2998074434","https://openalex.org/W3000716014","https://openalex.org/W3005086430","https://openalex.org/W3014274353","https://openalex.org/W3014875133","https://openalex.org/W3015605314","https://openalex.org/W3021274205","https://openalex.org/W3024905798","https://openalex.org/W3025067198","https://openalex.org/W3044657053","https://openalex.org/W3045041297","https://openalex.org/W3080622597","https://openalex.org/W3090952333","https://openalex.org/W3091163785","https://openalex.org/W3091621850","https://openalex.org/W3091722391","https://openalex.org/W3097333530","https://openalex.org/W3103407002","https://openalex.org/W3105429705","https://openalex.org/W3108010663","https://openalex.org/W3111390419","https://openalex.org/W3113062381","https://openalex.org/W3116877279","https://openalex.org/W3118612008","https://openalex.org/W3119955105","https://openalex.org/W3120249410","https://openalex.org/W3120704879","https://openalex.org/W3123427206","https://openalex.org/W3125596609","https://openalex.org/W3132950125","https://openalex.org/W3133963303","https://openalex.org/W3140854437","https://openalex.org/W3145013517","https://openalex.org/W3160238701","https://openalex.org/W3164164026","https://openalex.org/W3165381529","https://openalex.org/W3174361912","https://openalex.org/W3187467055","https://openalex.org/W3196927807","https://openalex.org/W3197944870","https://openalex.org/W3198931783","https://openalex.org/W3202929541","https://openalex.org/W3203329309","https://openalex.org/W3204683301","https://openalex.org/W3206577104","https://openalex.org/W3210231570","https://openalex.org/W3213111842","https://openalex.org/W3214771494","https://openalex.org/W3215786562","https://openalex.org/W3216835679","https://openalex.org/W4205510105","https://openalex.org/W4205634159","https://openalex.org/W4206967005","https://openalex.org/W4210888658","https://openalex.org/W4221139071","https://openalex.org/W4225878670","https://openalex.org/W4231117492","https://openalex.org/W4246674854","https://openalex.org/W4249081347","https://openalex.org/W4280552702","https://openalex.org/W4281387691","https://openalex.org/W4281778452","https://openalex.org/W4283170759","https://openalex.org/W4283709242","https://openalex.org/W4285059789","https://openalex.org/W4287849792","https://openalex.org/W4294691140","https://openalex.org/W4315746341","https://openalex.org/W4365443444","https://openalex.org/W4378364326","https://openalex.org/W4378530772","https://openalex.org/W4385336663","https://openalex.org/W4385484675","https://openalex.org/W4387251303","https://openalex.org/W4387951134","https://openalex.org/W4389431787","https://openalex.org/W4390517513","https://openalex.org/W4391623176","https://openalex.org/W4392353733","https://openalex.org/W4392816088","https://openalex.org/W4398198426"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2768892939","https://openalex.org/W3164408430","https://openalex.org/W4285507391","https://openalex.org/W2397240470","https://openalex.org/W2602767565","https://openalex.org/W170652726","https://openalex.org/W2883822334","https://openalex.org/W2134874482"],"abstract_inverted_index":{"In":[0,66,169],"the":[1,4,45,81,105,162,171,187],"past":[2],"decade,":[3],"number":[5],"of":[6,84,93,152,190],"malware":[7,18,85,99,111,157,179,197],"variants":[8],"has":[9],"increased":[10],"rapidly.":[11],"Many":[12],"researchers":[13],"have":[14,32,103],"proposed":[15,172],"to":[16,55,61,73,80,140,154,181,196],"detect":[17],"using":[19],"intelligent":[20],"techniques,":[21],"such":[22],"as":[23],"Machine":[24],"Learning":[25,29],"(ML)":[26],"and":[27,35,59,64,77,108,178,193],"Deep":[28],"(DL),":[30],"which":[31],"high":[33],"accuracy":[34],"precision.":[36],"These":[37],"methods,":[38],"however,":[39],"suffer":[40],"from":[41],"being":[42],"opaque":[43,188],"in":[44,98,110,166],"decision-making":[46],"process.":[47],"Therefore,":[48],"we":[49,69,102],"need":[50],"Artificial":[51],"Intelligence":[52],"(AI)-based":[53],"models":[54,130,184],"be":[56,62,115],"explainable,":[57],"interpretable,":[58],"transparent":[60],"reliable":[63],"trustworthy.":[65],"this":[67],"survey,":[68],"reviewed":[70],"articles":[71],"related":[72],"Explainable":[74,126],"AI":[75,191],"(XAI)":[76],"their":[78,194],"application":[79],"significant":[82],"scope":[83],"detection.":[86],"The":[87],"article":[88],"encompasses":[89],"a":[90,146,150],"comprehensive":[91],"examination":[92],"various":[94],"XAI":[95,119,156,177,183],"algorithms":[96],"employed":[97],"analysis.":[100,198],"Moreover,":[101],"addressed":[104],"characteristics,":[106],"challenges,":[107],"requirements":[109],"analysis":[112,158,180],"that":[113,123,148],"cannot":[114],"accommodated":[116],"by":[117],"standard":[118],"methods.":[120],"We":[121,143],"discussed":[122],"even":[124],"though":[125],"Malware":[127],"Detection":[128],"(EMD)":[129],"provide":[131],"explainability,":[132],"they":[133],"make":[134],"an":[135],"AI-based":[136],"model":[137],"more":[138],"vulnerable":[139],"adversarial":[141],"attacks.":[142],"also":[144],"propose":[145],"framework":[147],"assigns":[149],"level":[151],"explainability":[153],"each":[155,167],"model,":[159],"based":[160],"on":[161,175],"security":[163],"features":[164],"involved":[165],"method.":[168],"summary,":[170],"project":[173],"focuses":[174],"combining":[176],"apply":[182],"for":[185],"scrutinizing":[186],"nature":[189],"systems":[192],"applications":[195]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":25},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}
