{"id":"https://openalex.org/W2980032325","doi":"https://doi.org/10.1155/2019/5278137","title":"All-in-One Framework for Detection, Unpacking, and Verification for Malware Analysis","display_name":"All-in-One Framework for Detection, Unpacking, and Verification for Malware Analysis","publication_year":2019,"publication_date":"2019-10-13","ids":{"openalex":"https://openalex.org/W2980032325","doi":"https://doi.org/10.1155/2019/5278137","mag":"2980032325"},"language":"en","primary_location":{"id":"doi:10.1155/2019/5278137","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2019/5278137","pdf_url":"https://downloads.hindawi.com/journals/scn/2019/5278137.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://downloads.hindawi.com/journals/scn/2019/5278137.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056904727","display_name":"Mi-Jung Choi","orcid":"https://orcid.org/0000-0002-9062-4604"},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Mi-Jung Choi","raw_affiliation_strings":["Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-9062-4604","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea","institution_ids":["https://openalex.org/I165507594"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020688402","display_name":"Jiwon Bang","orcid":null},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jiwon Bang","raw_affiliation_strings":["Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-2068-0942","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea","institution_ids":["https://openalex.org/I165507594"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100767189","display_name":"Jongwook Kim","orcid":"https://orcid.org/0000-0002-2463-2227"},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jongwook Kim","raw_affiliation_strings":["Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea","institution_ids":["https://openalex.org/I165507594"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101723775","display_name":"Hajin Kim","orcid":"https://orcid.org/0000-0002-3573-4771"},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hajin Kim","raw_affiliation_strings":["Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea","institution_ids":["https://openalex.org/I165507594"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101402186","display_name":"Yang\u2010Sae Moon","orcid":"https://orcid.org/0000-0002-2396-0405"},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Yang-Sae Moon","raw_affiliation_strings":["Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-2396-0405","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kangwon National University, 1 Kangwondaehak-gil, Chuncheon-si, Gangwon 24341, Republic of Korea","institution_ids":["https://openalex.org/I165507594"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5101402186"],"corresponding_institution_ids":["https://openalex.org/I165507594"],"apc_list":{"value":2550,"currency":"USD","value_usd":2550},"apc_paid":{"value":2550,"currency":"USD","value_usd":2550},"fwci":0.7726,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.73787735,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2019","issue":null,"first_page":"1","last_page":"16"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unpacking","display_name":"Unpacking","score":0.9996256828308105},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7731503248214722},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7704963684082031},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5875867605209351},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4708760976791382},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3390343189239502},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.31443753838539124},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08474883437156677}],"concepts":[{"id":"https://openalex.org/C2777256151","wikidata":"https://www.wikidata.org/wiki/Q7897273","display_name":"Unpacking","level":2,"score":0.9996256828308105},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7731503248214722},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7704963684082031},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5875867605209351},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4708760976791382},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3390343189239502},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31443753838539124},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08474883437156677},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1155/2019/5278137","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2019/5278137","pdf_url":"https://downloads.hindawi.com/journals/scn/2019/5278137.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:472055ac407d44dd8e47a1bd374cc2ee","is_oa":false,"landing_page_url":"https://doaj.org/article/472055ac407d44dd8e47a1bd374cc2ee","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security and Communication Networks, Vol 2019 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1155/2019/5278137","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2019/5278137","pdf_url":"https://downloads.hindawi.com/journals/scn/2019/5278137.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6183839096","display_name":null,"funder_award_id":"R18XA05","funder_id":"https://openalex.org/F4320326258","funder_display_name":"Korea Electric Power Corporation"},{"id":"https://openalex.org/G6594212286","display_name":null,"funder_award_id":"R18XA05","funder_id":"https://openalex.org/F4320322030","funder_display_name":"Ministry of Science, ICT and Future Planning"},{"id":"https://openalex.org/G7896027814","display_name":null,"funder_award_id":"2017-0-00158","funder_id":"https://openalex.org/F4320322030","funder_display_name":"Ministry of Science, ICT and Future Planning"},{"id":"https://openalex.org/G877822136","display_name":null,"funder_award_id":"2017-0-00158","funder_id":"https://openalex.org/F4320326258","funder_display_name":"Korea Electric Power Corporation"}],"funders":[{"id":"https://openalex.org/F4320322030","display_name":"Ministry of Science, ICT and Future Planning","ror":"https://ror.org/032e49973"},{"id":"https://openalex.org/F4320324891","display_name":"Iran Telecommunication Research Center","ror":"https://ror.org/01a3g2z22"},{"id":"https://openalex.org/F4320326258","display_name":"Korea Electric Power Corporation","ror":"https://ror.org/04fperw70"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2980032325.pdf","grobid_xml":"https://content.openalex.org/works/W2980032325.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W1936417930","https://openalex.org/W1971826496","https://openalex.org/W1976126576","https://openalex.org/W2010910232","https://openalex.org/W2124659400","https://openalex.org/W2146500100","https://openalex.org/W2150423842","https://openalex.org/W2151300580","https://openalex.org/W2333730164","https://openalex.org/W2346169715","https://openalex.org/W2485023392","https://openalex.org/W2596953812","https://openalex.org/W2792492047","https://openalex.org/W2891723189"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2768892939","https://openalex.org/W4285507391","https://openalex.org/W3107556205","https://openalex.org/W2610659201","https://openalex.org/W2105334567","https://openalex.org/W2067547021","https://openalex.org/W2805262980","https://openalex.org/W4234891089"],"abstract_inverted_index":{"Packing":[0],"is":[1,203],"the":[2,18,23,29,36,47,62,109,132,137,152,157,171,180,188,198,206,210,225],"most":[3,223],"common":[4],"analysis":[5,30,67],"avoidance":[6],"technique":[7],"for":[8,17,222,228],"hiding":[9],"malware.":[10,64],"Also,":[11],"packing":[12,114,133,146],"can":[13],"make":[14],"it":[15],"harder":[16],"security":[19],"researcher":[20],"to":[21,34,41,45,60,75,205,217],"identify":[22],"behaviour":[24],"of":[25,108,173,187,219,224],"malware":[26],"and":[27,56,90,119,144,160,209],"increase":[28,131],"time.":[31],"In":[32,49,196],"order":[33],"analyze":[35,61],"packed":[37,63],"malware,":[38],"we":[39,52,72,103,128],"need":[40],"perform":[42],"unpacking":[43,55,70,92,110,116,153,162,174,183,213],"first":[44,129],"release":[46],"packing.":[48],"this":[50,101],"paper,":[51,102],"focus":[53],"on":[54,68],"its":[57],"related":[58],"technologies":[59],"Through":[65],"extensive":[66],"previous":[69],"studies,":[71],"pay":[73],"attention":[74],"four":[76,98,142],"important":[77],"drawbacks:":[78],"no":[79,83,87,91],"phase":[80,139,154],"integration":[81],",":[82,86,89],"detection":[84,134,138,147,201],"combination":[85],"real-restoration":[88],"verification":[93,120,168],".":[94],"To":[95],"resolve":[96],"these":[97],"drawbacks,":[99],"in":[100,122,136,192],"present":[104,166],"an":[105,123,193],"all-in-one":[106,182],"structure":[107],"system":[111,184,211],"that":[112,179],"performs":[113,185,212],"detection,":[115],"(i.e.,":[117],"restoration),":[118],"phases":[121,190],"integrated":[124,194],"framework.":[125,195],"For":[126],"this,":[127],"greatly":[130],"accuracy":[135,172,221],"by":[140,155],"combining":[141],"existing":[143,207],"new":[145],"techniques.":[148,163],"We":[149,164],"then":[150],"improve":[151],"using":[156],"state-of-the-art":[158],"static":[159],"dynamic":[161],"also":[165],"a":[167,229],"algorithm":[169],"evaluating":[170],"results.":[175],"Experimental":[176],"results":[177],"show":[178],"proposed":[181,199],"all":[186],"three":[189],"well":[191,215],"particular,":[197],"hybrid":[200],"method":[202],"superior":[204],"methods,":[208],"very":[214],"up":[216],"100%":[218],"restoration":[220],"files":[226],"except":[227],"few":[230],"packers.":[231]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}