{"id":"https://openalex.org/W2479781685","doi":"https://doi.org/10.1155/2016/8069672","title":"A Data Mining Classification Approach for Behavioral Malware Detection","display_name":"A Data Mining Classification Approach for Behavioral Malware Detection","publication_year":2016,"publication_date":"2016-01-01","ids":{"openalex":"https://openalex.org/W2479781685","doi":"https://doi.org/10.1155/2016/8069672","mag":"2479781685"},"language":"en","primary_location":{"id":"doi:10.1155/2016/8069672","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2016/8069672","pdf_url":"http://downloads.hindawi.com/journals/jcnc/2016/8069672.pdf","source":{"id":"https://openalex.org/S2764435486","display_name":"Journal of Computer Networks and Communications","issn_l":"2090-7141","issn":["2090-7141","2090-715X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Networks and Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://downloads.hindawi.com/journals/jcnc/2016/8069672.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101526956","display_name":"Monire Norouzi","orcid":"https://orcid.org/0000-0002-0630-7762"},"institutions":[{"id":"https://openalex.org/I110525433","display_name":"Islamic Azad University, Tehran","ror":"https://ror.org/01kzn7k21","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433"]},{"id":"https://openalex.org/I155419210","display_name":"Islamic Azad University, Science and Research Branch","ror":"https://ror.org/03187yj51","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I155419210"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Monire Norouzi","raw_affiliation_strings":["Young Researchers and Elite Club, Islamic Azad University, Hadishahr Branch, Hadishahr, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Young Researchers and Elite Club, Islamic Azad University, Hadishahr Branch, Hadishahr, Iran","institution_ids":["https://openalex.org/I110525433","https://openalex.org/I155419210"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080921529","display_name":"Alireza Souri","orcid":"https://orcid.org/0000-0001-8314-9051"},"institutions":[{"id":"https://openalex.org/I110525433","display_name":"Islamic Azad University, Tehran","ror":"https://ror.org/01kzn7k21","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Alireza Souri","raw_affiliation_strings":["Department of Computer Engineering, Islamic Azad University, Hadishahr Branch, Hadishahr, Iran"],"raw_orcid":"https://orcid.org/0000-0001-8314-9051","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Islamic Azad University, Hadishahr Branch, Hadishahr, Iran","institution_ids":["https://openalex.org/I110525433"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048041424","display_name":"Majid Samad Zamini","orcid":null},"institutions":[{"id":"https://openalex.org/I110525433","display_name":"Islamic Azad University, Tehran","ror":"https://ror.org/01kzn7k21","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Majid Samad Zamini","raw_affiliation_strings":["Department of Computer Engineering, Islamic Azad University, Sardroud Branch, Sardroud, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Islamic Azad University, Sardroud Branch, Sardroud, Iran","institution_ids":["https://openalex.org/I110525433"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5080921529"],"corresponding_institution_ids":["https://openalex.org/I110525433"],"apc_list":{"value":1450,"currency":"USD","value_usd":1450},"apc_paid":{"value":1450,"currency":"USD","value_usd":1450},"fwci":5.3919,"has_fulltext":true,"cited_by_count":56,"citation_normalized_percentile":{"value":0.96048218,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"2016","issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9411332607269287},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8456661701202393},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6690576076507568},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.45776206254959106},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.43951615691185},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42040926218032837},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.15710589289665222}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9411332607269287},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8456661701202393},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6690576076507568},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45776206254959106},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.43951615691185},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42040926218032837},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.15710589289665222},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1155/2016/8069672","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2016/8069672","pdf_url":"http://downloads.hindawi.com/journals/jcnc/2016/8069672.pdf","source":{"id":"https://openalex.org/S2764435486","display_name":"Journal of Computer Networks and Communications","issn_l":"2090-7141","issn":["2090-7141","2090-715X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Networks and Communications","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:7821f0ecf8f64be6b873d56f41d3b05d","is_oa":true,"landing_page_url":"https://doaj.org/article/7821f0ecf8f64be6b873d56f41d3b05d","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Computer Networks and Communications, Vol 2016 (2016)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1155/2016/8069672","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2016/8069672","pdf_url":"http://downloads.hindawi.com/journals/jcnc/2016/8069672.pdf","source":{"id":"https://openalex.org/S2764435486","display_name":"Journal of Computer Networks and Communications","issn_l":"2090-7141","issn":["2090-7141","2090-715X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Networks and Communications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2479781685.pdf","grobid_xml":"https://content.openalex.org/works/W2479781685.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W62298501","https://openalex.org/W66285391","https://openalex.org/W568760110","https://openalex.org/W574580640","https://openalex.org/W1567557924","https://openalex.org/W1573286687","https://openalex.org/W1795245349","https://openalex.org/W1873332500","https://openalex.org/W1966150547","https://openalex.org/W1987684126","https://openalex.org/W1992419399","https://openalex.org/W1993692165","https://openalex.org/W1994740897","https://openalex.org/W2012370199","https://openalex.org/W2012648967","https://openalex.org/W2018146476","https://openalex.org/W2023061740","https://openalex.org/W2029674613","https://openalex.org/W2034102017","https://openalex.org/W2054976181","https://openalex.org/W2057787526","https://openalex.org/W2059995760","https://openalex.org/W2064754122","https://openalex.org/W2066220442","https://openalex.org/W2069720347","https://openalex.org/W2070896531","https://openalex.org/W2079215333","https://openalex.org/W2087461593","https://openalex.org/W2099053789","https://openalex.org/W2104619000","https://openalex.org/W2121032650","https://openalex.org/W2121749752","https://openalex.org/W2130116193","https://openalex.org/W2135814109","https://openalex.org/W2138471478","https://openalex.org/W2138644293","https://openalex.org/W2144112223","https://openalex.org/W2150795982","https://openalex.org/W2153072998","https://openalex.org/W2153736474","https://openalex.org/W2155712369","https://openalex.org/W2167975832","https://openalex.org/W2177019876","https://openalex.org/W2328277568","https://openalex.org/W2373555819","https://openalex.org/W2963478035","https://openalex.org/W2998066361"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W3046775127","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474"],"abstract_inverted_index":{"Data":[0],"mining":[1,18,27,123,129],"techniques":[2],"have":[3],"numerous":[4],"applications":[5],"in":[6,39,148],"malware":[7,32,43,63,74,136,141,147],"detection.":[8],"Classification":[9],"method":[10,56],"is":[11,131],"one":[12],"of":[13,50,119,140],"the":[14,46,62,88,100,117,120],"most":[15],"popular":[16],"data":[17,26,95,108,122,128],"techniques.":[19],"In":[20],"this":[21],"paper":[22],"we":[23,98],"present":[24],"a":[25,73,81,104,149],"classification":[28,37,139],"approach":[29,130],"to":[30,41,80,103,145],"detect":[31,42,146],"behavior.":[33],"We":[34],"proposed":[35,101,121,127],"different":[36],"methods":[38],"order":[40],"based":[44],"on":[45],"feature":[47],"and":[48,96,137],"behavior":[49,75],"each":[51],"malware.":[52],"A":[53,65],"dynamic":[54],"analysis":[55],"has":[57,68],"been":[58,69],"presented":[59,70],"for":[60,71,134],"identifying":[61],"features.":[64],"suggested":[66],"program":[67],"converting":[72],"executive":[76],"history":[77],"XML":[78],"file":[79],"suitable":[82],"WEKA":[83,111],"tool":[84],"input.":[85],"To":[86],"illustrate":[87],"performance":[89],"efficiency":[90],"as":[91,93],"well":[92],"training":[94],"test,":[97],"apply":[99],"approaches":[102],"real":[105],"case":[106],"study":[107],"set":[109],"using":[110],"tool.":[112],"The":[113],"evaluation":[114],"results":[115],"demonstrated":[116],"availability":[118],"approach.":[124],"Also":[125],"our":[126],"more":[132],"efficient":[133],"detecting":[135],"behavioral":[138,150],"can":[142],"be":[143],"useful":[144],"antivirus.":[151]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":5}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}