{"id":"https://openalex.org/W7115190006","doi":"https://doi.org/10.1145/3777555.3777568","title":"Enhancing Multi-class Malware Detection in Resource-constrained Environments","display_name":"Enhancing Multi-class Malware Detection in Resource-constrained Environments","publication_year":2025,"publication_date":"2025-12-15","ids":{"openalex":"https://openalex.org/W7115190006","doi":"https://doi.org/10.1145/3777555.3777568"},"language":null,"primary_location":{"id":"doi:10.1145/3777555.3777568","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3777555.3777568","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3777555.3777568","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Next Generation Computing, Communication, Systems and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3777555.3777568","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Alif Rahman","orcid":"https://orcid.org/0009-0003-5033-3997"},"institutions":[{"id":"https://openalex.org/I5518804","display_name":"BRAC University","ror":"https://ror.org/00sge8677","country_code":"BD","type":"education","lineage":["https://openalex.org/I5518804"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Alif Rahman","raw_affiliation_strings":["Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0009-0003-5033-3997","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I5518804"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Abdul Khalek Alve","orcid":"https://orcid.org/0009-0008-3341-3334"},"institutions":[{"id":"https://openalex.org/I5518804","display_name":"BRAC University","ror":"https://ror.org/00sge8677","country_code":"BD","type":"education","lineage":["https://openalex.org/I5518804"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Abdul Khalek Alve","raw_affiliation_strings":["Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0009-0008-3341-3334","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I5518804"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Sazzad Hossen Himel","orcid":"https://orcid.org/0009-0005-3789-812X"},"institutions":[{"id":"https://openalex.org/I5518804","display_name":"BRAC University","ror":"https://ror.org/00sge8677","country_code":"BD","type":"education","lineage":["https://openalex.org/I5518804"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Sazzad Hossen Himel","raw_affiliation_strings":["Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0009-0005-3789-812X","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I5518804"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Saadman Zaman","orcid":"https://orcid.org/0009-0006-6478-3667"},"institutions":[{"id":"https://openalex.org/I5518804","display_name":"BRAC University","ror":"https://ror.org/00sge8677","country_code":"BD","type":"education","lineage":["https://openalex.org/I5518804"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Saadman Zaman","raw_affiliation_strings":["Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0009-0006-6478-3667","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I5518804"]}]},{"author_position":"last","author":{"id":null,"display_name":"Muhammad Iqbal Hossain","orcid":"https://orcid.org/0000-0002-0915-9291"},"institutions":[{"id":"https://openalex.org/I5518804","display_name":"BRAC University","ror":"https://ror.org/00sge8677","country_code":"BD","type":"education","lineage":["https://openalex.org/I5518804"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Muhammad Iqbal Hossain","raw_affiliation_strings":["Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0000-0002-0915-9291","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, BRAC University, Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I5518804"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.56378518,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"73","last_page":"78"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9613000154495239,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9613000154495239,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.01360000018030405,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/undersampling","display_name":"Undersampling","score":0.7265999913215637},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6402999758720398},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6007999777793884},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.47380000352859497},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.4715999960899353},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.4544999897480011},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.439300000667572},{"id":"https://openalex.org/keywords/oversampling","display_name":"Oversampling","score":0.40799999237060547},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.3984000086784363},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.3939000070095062}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7972000241279602},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.7479000091552734},{"id":"https://openalex.org/C136536468","wikidata":"https://www.wikidata.org/wiki/Q1225894","display_name":"Undersampling","level":2,"score":0.7265999913215637},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.691100001335144},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6402999758720398},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6007999777793884},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.47380000352859497},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.4715999960899353},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4544999897480011},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.439300000667572},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.40799999237060547},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4036000072956085},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.3984000086784363},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.3939000070095062},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.3813000023365021},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.36970001459121704},{"id":"https://openalex.org/C110332635","wikidata":"https://www.wikidata.org/wiki/Q629498","display_name":"Genetic programming","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3495999872684479},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.3418999910354614},{"id":"https://openalex.org/C199190896","wikidata":"https://www.wikidata.org/wiki/Q3509276","display_name":"Learning classifier system","level":3,"score":0.34150001406669617},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.3391999900341034},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3206999897956848},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C2780150128","wikidata":"https://www.wikidata.org/wiki/Q21948731","display_name":"Extreme learning machine","level":3,"score":0.3160000145435333},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.2912999987602234},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.26489999890327454},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C141404830","wikidata":"https://www.wikidata.org/wiki/Q2823869","display_name":"AdaBoost","level":3,"score":0.26190000772476196},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2614000141620636}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3777555.3777568","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3777555.3777568","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3777555.3777568","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Next Generation Computing, Communication, Systems and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3777555.3777568","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3777555.3777568","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3777555.3777568","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Next Generation Computing, Communication, Systems and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7115190006.pdf","grobid_xml":"https://content.openalex.org/works/W7115190006.grobid-xml"},"referenced_works_count":10,"referenced_works":["https://openalex.org/W2751661638","https://openalex.org/W4293192140","https://openalex.org/W4379514871","https://openalex.org/W4391333914","https://openalex.org/W4391453175","https://openalex.org/W4393048828","https://openalex.org/W4399882403","https://openalex.org/W4403163307","https://openalex.org/W4408533507","https://openalex.org/W4410309579"],"related_works":[],"abstract_inverted_index":{"The":[0,197],"rising":[1],"variety":[2],"of":[3,18,44,48,68,148],"malware":[4,158],"types":[5,47],"poses":[6],"a":[7,83,105,138,171,193,205],"significant":[8],"threat":[9],"to":[10,203],"cybersecurity,":[11],"particularly":[12],"in":[13,32,66,73],"resource-constrained":[14,74,214],"environments":[15],"like":[16],"Internet":[17],"Things":[19],"(IoT)":[20],"devices.":[21],"Although":[22],"existing":[23],"machine":[24,87],"learning":[25,88],"techniques":[26,115],"have":[27],"achieved":[28,179],"almost":[29],"flawless":[30],"outcomes":[31],"identifying":[33],"binary":[34],"malware,":[35,49],"they":[36],"face":[37],"challenges":[38],"with":[39,112,192],"the":[40,99,166,200],"more":[41],"complex":[42],"task":[43],"categorizing":[45],"several":[46],"which":[50,178],"requires":[51],"distinguishing":[52],"between":[53,207],"different":[54],"families":[55],"and":[56,85,123,153,164,183,187,209],"variants.":[57],"Conventional":[58],"deep":[59],"or":[60],"ensemble":[61],"models":[62],"are":[63],"often":[64],"expensive":[65],"terms":[67],"computation,":[69],"limiting":[70],"their":[71],"application":[72],"settings.":[75],"To":[76,94],"tackle":[77],"these":[78],"issues,":[79],"this":[80],"document":[81],"proposes":[82],"lightweight":[84],"efficient":[86,163],"framework":[89],"for":[90,133,150,156,185,212],"classifying":[91],"multi-class":[92],"malware.":[93],"enhance":[95],"performance":[96],"while":[97],"keeping":[98],"complexity":[100],"low,":[101],"our":[102,143],"approach":[103],"integrates":[104],"Light":[106],"Gradient":[107],"Boosting":[108],"Machine":[109],"(LightGBM)":[110],"classifier":[111,174],"data":[113],"balancing":[114],"such":[116],"as":[117],"Synthetic":[118],"Minority":[119],"Oversampling":[120],"Technique":[121],"(SMOTE)":[122],"Self-Organizing":[124],"Map":[125],"\u2013":[126],"Undersampling":[127],"(SOM-US).":[128],"Genetic":[129],"Algorithm":[130],"is":[131,161],"implemented":[132],"feature":[134],"selection.":[135],"Evaluations":[136],"on":[137],"benchmark":[139],"dataset":[140],"indicate":[141],"that":[142],"model":[144,202],"reaches":[145],"an":[146],"accuracy":[147,155,181,208],"89.1%":[149],"family-level":[151],"classification":[152],"77%":[154],"individual":[157,188],"types.":[159],"It":[160],"computationally":[162],"outperforms":[165],"state-of-the-art":[167],"models.":[168],"For":[169],"comparison,":[170],"Random":[172],"Forest":[173],"was":[175],"also":[176],"evaluated,":[177],"higher":[180],"(91.2%":[182],"78.7%":[184],"family":[186],"classification,":[189],"respectively)":[190],"but":[191],"greater":[194],"computational":[195],"cost.":[196],"results":[198],"demonstrate":[199],"LightGBM":[201],"be":[204],"balance":[206],"efficiency,":[210],"suitable":[211],"real-world":[213],"environments.":[215]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-12-15T00:00:00"}