{"id":"https://openalex.org/W3045765453","doi":"https://doi.org/10.1145/3409073.3409093","title":"Byte Visualization Method for Malware Classification","display_name":"Byte Visualization Method for Malware Classification","publication_year":2020,"publication_date":"2020-06-19","ids":{"openalex":"https://openalex.org/W3045765453","doi":"https://doi.org/10.1145/3409073.3409093","mag":"3045765453"},"language":"en","primary_location":{"id":"doi:10.1145/3409073.3409093","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3409073.3409093","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 5th International Conference on Machine Learning Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079081178","display_name":"Zhuojun Ren","orcid":"https://orcid.org/0000-0001-9108-7743"},"institutions":[{"id":"https://openalex.org/I181326427","display_name":"Donghua University","ror":"https://ror.org/035psfh38","country_code":"CN","type":"education","lineage":["https://openalex.org/I181326427"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuojun Ren","raw_affiliation_strings":["College of Information Science and Technology, Donghua University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, Donghua University, Shanghai, China","institution_ids":["https://openalex.org/I181326427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102992722","display_name":"Guang Chen","orcid":"https://orcid.org/0000-0003-1487-8044"},"institutions":[{"id":"https://openalex.org/I181326427","display_name":"Donghua University","ror":"https://ror.org/035psfh38","country_code":"CN","type":"education","lineage":["https://openalex.org/I181326427"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guang Chen","raw_affiliation_strings":["College of Information Science and Technology, Donghua University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, Donghua University, Shanghai, China","institution_ids":["https://openalex.org/I181326427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008173961","display_name":"Wenke Lu","orcid":"https://orcid.org/0000-0002-6753-4061"},"institutions":[{"id":"https://openalex.org/I181326427","display_name":"Donghua University","ror":"https://ror.org/035psfh38","country_code":"CN","type":"education","lineage":["https://openalex.org/I181326427"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenke Lu","raw_affiliation_strings":["College of Information Science and Technology, Donghua University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, Donghua University, Shanghai, China","institution_ids":["https://openalex.org/I181326427"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I181326427"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.0717624,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"136","last_page":"140"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9767000079154968,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9753999710083008,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9438785910606384},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8056660890579224},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.7418258190155029},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.5624257326126099},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5109614133834839},{"id":"https://openalex.org/keywords/jaccard-index","display_name":"Jaccard index","score":0.47968530654907227},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.462788850069046},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.4618718922138214},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43958547711372375},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3946838974952698},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.24163371324539185},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16298604011535645},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14020511507987976}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9438785910606384},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8056660890579224},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.7418258190155029},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.5624257326126099},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5109614133834839},{"id":"https://openalex.org/C203519979","wikidata":"https://www.wikidata.org/wiki/Q865360","display_name":"Jaccard index","level":3,"score":0.47968530654907227},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.462788850069046},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.4618718922138214},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43958547711372375},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3946838974952698},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.24163371324539185},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16298604011535645},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14020511507987976}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3409073.3409093","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3409073.3409093","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 5th International Conference on Machine Learning Technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4699999988079071,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5286294231","display_name":null,"funder_award_id":"61671006","funder_id":"https://openalex.org/F4320327720","funder_display_name":"Foundation for Innovative Research Groups of the National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320327720","display_name":"Foundation for Innovative Research Groups of the National Natural Science Foundation of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W146681103","https://openalex.org/W201444914","https://openalex.org/W1499329733","https://openalex.org/W1550383259","https://openalex.org/W1964181417","https://openalex.org/W2010065958","https://openalex.org/W2029653641","https://openalex.org/W2035156256","https://openalex.org/W2070970642","https://openalex.org/W2079215333","https://openalex.org/W2127969088","https://openalex.org/W2130971075","https://openalex.org/W2166509025","https://openalex.org/W2463281489","https://openalex.org/W2486441280","https://openalex.org/W2538108907","https://openalex.org/W2545965848","https://openalex.org/W4238530616","https://openalex.org/W6633894697","https://openalex.org/W6637665244"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2768892939","https://openalex.org/W2160963033","https://openalex.org/W3022706011","https://openalex.org/W2909615516","https://openalex.org/W2249256574","https://openalex.org/W2397240470","https://openalex.org/W3128265165","https://openalex.org/W4210907385"],"abstract_inverted_index":{"The":[0,70],"exponential":[1],"increase":[2],"in":[3,61],"the":[4,10,62,90,99,103,118,123,135,148],"number":[5],"of":[6,65,85,102,125,138],"malware":[7,16,39,55,66,73,115,153],"stems":[8],"from":[9,113],"fact":[11],"that":[12,35,147],"attackers":[13],"often":[14],"create":[15],"variants":[17],"with":[18,89],"automated":[19,22],"tools.":[20],"And":[21],"tools":[23],"generally":[24],"tend":[25],"to":[26,67,93],"reuse":[27],"similar":[28,43],"function":[29],"modules.":[30,44],"It":[31],"is":[32],"essential,":[33],"therefore,":[34],"security":[36],"analysts":[37],"distinguish":[38,152],"families":[40,116,154],"by":[41],"recognizing":[42],"For":[45],"this":[46],"reason,":[47],"we":[48,106],"present":[49],"a":[50],"new":[51],"visualization":[52],"method":[53,71,133,150],"for":[54,82],"pedigree":[56],"analysis,":[57],"using":[58],"visual":[59],"similarities":[60],"byte":[63],"distributions":[64],"implement":[68],"classification.":[69],"converts":[72],"samples":[74],"into":[75],"dot":[76],"plot":[77],"patterns,":[78],"and":[79,130],"then":[80],"searches":[81],"k-nearest":[83],"neighbors":[84],"every":[86],"tested":[87],"sample":[88],"Jaccard":[91],"distance":[92],"determine":[94],"its":[95],"family.":[96],"To":[97],"evaluate":[98],"classification":[100],"performance":[101],"proposed":[104,149],"method,":[105],"randomly":[107],"collected":[108],"771":[109],"harmful":[110],"binary":[111],"files":[112],"72":[114],"on":[117],"VX":[119],"Heavens":[120],"website.":[121],"With":[122],"value":[124],"k":[126,141],"varying":[127],"between":[128],"1":[129],"9,":[131],"our":[132],"had":[134],"best":[136],"accuracy":[137],"92.48%":[139],"when":[140],"=":[142],"1.The":[143],"experimental":[144],"results":[145],"show":[146],"can":[151],"effectively.":[155]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}