{"id":"https://openalex.org/W3019033295","doi":"https://doi.org/10.1155/2020/6726147","title":"Combat Mobile Evasive Malware via Skip-Gram-Based Malware Detection","display_name":"Combat Mobile Evasive Malware via Skip-Gram-Based Malware Detection","publication_year":2020,"publication_date":"2020-04-20","ids":{"openalex":"https://openalex.org/W3019033295","doi":"https://doi.org/10.1155/2020/6726147","mag":"3019033295"},"language":"en","primary_location":{"id":"doi:10.1155/2020/6726147","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2020/6726147","pdf_url":"https://downloads.hindawi.com/journals/scn/2020/6726147.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://downloads.hindawi.com/journals/scn/2020/6726147.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067739279","display_name":"Alper Egitmen","orcid":"https://orcid.org/0000-0001-9249-3700"},"institutions":[{"id":"https://openalex.org/I4101805","display_name":"Y\u0131ld\u0131z Technical University","ror":"https://ror.org/0547yzj13","country_code":"TR","type":"education","lineage":["https://openalex.org/I4101805"]}],"countries":["TR"],"is_corresponding":true,"raw_author_name":"Alper Egitmen","raw_affiliation_strings":["Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"],"raw_orcid":"https://orcid.org/0000-0001-9249-3700","affiliations":[{"raw_affiliation_string":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4101805"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001442671","display_name":"\u0130rfan Bulut","orcid":"https://orcid.org/0000-0002-7449-6278"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Irfan Bulut","raw_affiliation_strings":["OM Partners, Koralenhoeve 23, 2160, Wommelgem, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"OM Partners, Koralenhoeve 23, 2160, Wommelgem, Belgium","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085062185","display_name":"R. Can Ayg\u00fcn","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"R. Can Aygun","raw_affiliation_strings":["University of California, Engineering VI, Los Angeles, CA 90095, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Engineering VI, Los Angeles, CA 90095, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077865701","display_name":"Ayse Bilge Gunduz","orcid":"https://orcid.org/0000-0003-0136-6488"},"institutions":[{"id":"https://openalex.org/I4101805","display_name":"Y\u0131ld\u0131z Technical University","ror":"https://ror.org/0547yzj13","country_code":"TR","type":"education","lineage":["https://openalex.org/I4101805"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"A. Bilge Gunduz","raw_affiliation_strings":["Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4101805"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028451052","display_name":"Omer Seyrekbasan","orcid":null},"institutions":[{"id":"https://openalex.org/I4101805","display_name":"Y\u0131ld\u0131z Technical University","ror":"https://ror.org/0547yzj13","country_code":"TR","type":"education","lineage":["https://openalex.org/I4101805"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Omer Seyrekbasan","raw_affiliation_strings":["Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4101805"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085505828","display_name":"A. G\u00f6khan Yavuz","orcid":"https://orcid.org/0000-0002-6490-0396"},"institutions":[{"id":"https://openalex.org/I4101805","display_name":"Y\u0131ld\u0131z Technical University","ror":"https://ror.org/0547yzj13","country_code":"TR","type":"education","lineage":["https://openalex.org/I4101805"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"A. Gokhan Yavuz","raw_affiliation_strings":["Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4101805"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5067739279"],"corresponding_institution_ids":["https://openalex.org/I4101805"],"apc_list":{"value":2550,"currency":"USD","value_usd":2550},"apc_paid":{"value":2550,"currency":"USD","value_usd":2550},"fwci":1.7367,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.84161556,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"2020","issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.98580002784729,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9040366411209106},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8776202201843262},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7296245694160461},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.7132834196090698},{"id":"https://openalex.org/keywords/n-gram","display_name":"n-gram","score":0.7083268165588379},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6107103824615479},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5398169755935669},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5356888771057129},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.5049205422401428},{"id":"https://openalex.org/keywords/test-set","display_name":"Test set","score":0.44487258791923523},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4428809583187103},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3689064681529999},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.27715611457824707},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2502337098121643},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1721126139163971}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9040366411209106},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8776202201843262},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7296245694160461},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.7132834196090698},{"id":"https://openalex.org/C117884012","wikidata":"https://www.wikidata.org/wiki/Q94489","display_name":"n-gram","level":3,"score":0.7083268165588379},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6107103824615479},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5398169755935669},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5356888771057129},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.5049205422401428},{"id":"https://openalex.org/C169903167","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Test set","level":2,"score":0.44487258791923523},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4428809583187103},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3689064681529999},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.27715611457824707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2502337098121643},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1721126139163971}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1155/2020/6726147","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2020/6726147","pdf_url":"https://downloads.hindawi.com/journals/scn/2020/6726147.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:5c40c7f118cd44b8ad6812d0a58f2283","is_oa":true,"landing_page_url":"https://doaj.org/article/5c40c7f118cd44b8ad6812d0a58f2283","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security and Communication Networks, Vol 2020 (2020)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1155/2020/6726147","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2020/6726147","pdf_url":"https://downloads.hindawi.com/journals/scn/2020/6726147.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3019033295.pdf","grobid_xml":"https://content.openalex.org/works/W3019033295.grobid-xml"},"referenced_works_count":7,"referenced_works":["https://openalex.org/W1994616650","https://openalex.org/W2060108852","https://openalex.org/W2100805904","https://openalex.org/W2789983203","https://openalex.org/W2943383044","https://openalex.org/W2980750320","https://openalex.org/W2990114920"],"related_works":["https://openalex.org/W4249118297","https://openalex.org/W2717179875","https://openalex.org/W2311926078","https://openalex.org/W3195586271","https://openalex.org/W4312234627","https://openalex.org/W2782775281","https://openalex.org/W2395100307","https://openalex.org/W2895504842","https://openalex.org/W1442860204","https://openalex.org/W3019033295"],"abstract_inverted_index":{"Android":[0,90,115,130],"malware":[1,18,26,42,52,66,86,100,192,209,234],"detection":[2,19,53,166,174,235],"is":[3],"an":[4,84],"important":[5],"research":[6],"topic":[7],"in":[8,211],"the":[9,68,95,109,156,159,169,181,196,208,212,261],"security":[10],"area.":[11],"There":[12],"are":[13,33],"a":[14,51,57,186],"variety":[15],"of":[16,30,129,250,258],"existing":[17],"models":[20,32],"based":[21,55],"on":[22,56,168,260],"static":[23],"and":[24,77,102,172,254],"dynamic":[25],"analysis.":[27],"However,":[28],"most":[29],"these":[31],"not":[34,201],"very":[35],"successful":[36],"when":[37],"it":[38,133],"comes":[39],"to":[40,49,63,75,139,207],"evasive":[41,65,99,177],"detection.":[43],"In":[44,73,155,180,227],"this":[45],"study,":[46],"we":[47,82,112,184,199,229],"aimed":[48],"create":[50],"model":[54,60,120,150,218,246],"natural":[58],"language":[59],"called":[61,88],"skip-gram":[62],"detect":[64],"with":[67,122,151,164,220,256],"highest":[69],"accuracy":[70,167,175,222],"rate":[71,223],"possible.":[72],"order":[74],"train":[76],"test":[78,187,213,263],"our":[79,148,231],"proposed":[80,119,149,232],"model,":[81],"used":[83,113],"up-to-date":[85],"dataset":[87,171,188],"Argus":[89],"Malware":[91],"Dataset":[92],"(AMD)":[93],"since":[94],"AMD":[96],"contains":[97],"various":[98],"families":[101,210],"detailed":[103],"information":[104],"about":[105],"them.":[106],"Meanwhile,":[107],"for":[108],"benign":[110,143],"samples,":[111],"Comodo":[114],"Benign":[116],"Dataset.":[117],"Our":[118,245],"starts":[121],"extracting":[123],"skip-gram-based":[124],"features":[125],"from":[126],"instruction":[127],"sequences":[128],"applications.":[131],"Then":[132],"applies":[134],"several":[135,238],"machine":[136],"learning":[137],"algorithms":[138],"classify":[140],"samples":[141,193],"as":[142],"or":[144],"malware.":[145,226],"We":[146],"tested":[147],"two":[152],"different":[153],"scenarios.":[154],"first":[157],"scenario,":[158,183],"random":[160,216],"forest-based":[161,217],"classifier":[162],"performed":[163,219],"95.64%":[165],"entire":[170],"95%":[173],"against":[176,224,237],"only":[178],"samples.":[179],"second":[182],"created":[185],"that":[189,205],"contained":[190],"zero-day":[191,225],"only.":[194],"For":[195],"training":[197],"set,":[198],"did":[200],"use":[202],"any":[203],"sample":[204],"belongs":[206],"set.":[214],"The":[215],"37.36%":[221],"addition,":[228],"compared":[230],"model\u2019s":[233],"performance":[236],"commercial":[239],"antimalware":[240,252],"applications":[241,253],"using":[242],"VirusTotal":[243],"API.":[244],"outperformed":[247],"7":[248],"out":[249],"10":[251],"tied":[255],"one":[257],"them":[259],"same":[262],"scenario.":[264]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}