{"id":"https://openalex.org/W7128960652","doi":"https://doi.org/10.1186/s42400-025-00416-y","title":"A packer identification method based on section-entropy plot","display_name":"A packer identification method based on section-entropy plot","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7128960652","doi":"https://doi.org/10.1186/s42400-025-00416-y"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-025-00416-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00416-y","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00416-y.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00416-y.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113956396","display_name":"Yueting Wan","orcid":null},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yueting Wan","raw_affiliation_strings":["Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]},{"raw_affiliation_string":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126054736","display_name":"Chun Guo","orcid":null},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Chun Guo","raw_affiliation_strings":["Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China"],"raw_orcid":"https://orcid.org/0000-0002-3341-220X","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]},{"raw_affiliation_string":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089715871","display_name":"Yuan Ping","orcid":"https://orcid.org/0000-0001-7703-4637"},"institutions":[{"id":"https://openalex.org/I903994226","display_name":"Xuchang University","ror":"https://ror.org/03k174p87","country_code":"CN","type":"education","lineage":["https://openalex.org/I903994226"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Ping","raw_affiliation_strings":["School of Information Engineering, Xuchang University, Xuchang, 461000, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Xuchang University, Xuchang, 461000, China","institution_ids":["https://openalex.org/I903994226"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126047782","display_name":"Yunhe Cui","orcid":null},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunhe Cui","raw_affiliation_strings":["Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]},{"raw_affiliation_string":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126057276","display_name":"Xiaodan Lyu","orcid":null},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaodan Lyu","raw_affiliation_strings":["Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]},{"raw_affiliation_string":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086384170","display_name":"Guowei Shen","orcid":"https://orcid.org/0000-0002-1329-4058"},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guowei Shen","raw_affiliation_strings":["Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Text Computing amd Cognitive Intelligence, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]},{"raw_affiliation_string":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, 550025, China","institution_ids":["https://openalex.org/I178232147"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5126054736"],"corresponding_institution_ids":["https://openalex.org/I178232147"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24178549,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7059000134468079,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7059000134468079,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.06710000336170197,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.0357000008225441,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.830299973487854},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.7617999911308289},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5443999767303467},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5270000100135803},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5085999965667725},{"id":"https://openalex.org/keywords/plot","display_name":"Plot (graphics)","score":0.5033000111579895},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.49070000648498535}],"concepts":[{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.830299973487854},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.7617999911308289},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6740999817848206},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5443999767303467},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5270000100135803},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5231000185012817},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5149000287055969},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5085999965667725},{"id":"https://openalex.org/C167651023","wikidata":"https://www.wikidata.org/wiki/Q1474611","display_name":"Plot (graphics)","level":2,"score":0.5033000111579895},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.49070000648498535},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.45899999141693115},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4198000133037567},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.38989999890327454},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.37529999017715454},{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.36230000853538513},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3452000021934509},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.32269999384880066},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2671000063419342},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.2581000030040741}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-025-00416-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00416-y","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00416-y.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:40d1c48d4b39458bbce0f75dedf8f2e0","is_oa":true,"landing_page_url":"https://doaj.org/article/40d1c48d4b39458bbce0f75dedf8f2e0","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 9, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-025-00416-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00416-y","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00416-y.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.602538526058197,"id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G5467660160","display_name":null,"funder_award_id":"No. CXTD2017099","funder_id":"https://openalex.org/F4320327776","funder_display_name":"Innovation Scientists and Technicians Troop Construction Projects of Henan Province"},{"id":"https://openalex.org/G6236104597","display_name":null,"funder_award_id":"No.[2024]014","funder_id":"https://openalex.org/F4320329858","funder_display_name":"Major Scientific and Technological Special Project of Guizhou Province"},{"id":"https://openalex.org/G7838497263","display_name":null,"funder_award_id":"62162009","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8238284103","display_name":null,"funder_award_id":"No. 62162009","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320327776","display_name":"Innovation Scientists and Technicians Troop Construction Projects of Henan Province","ror":null},{"id":"https://openalex.org/F4320329858","display_name":"Major Scientific and Technological Special Project of Guizhou Province","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W7128960652.pdf"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1598779648","https://openalex.org/W1849277567","https://openalex.org/W1892063863","https://openalex.org/W2010910232","https://openalex.org/W2040867586","https://openalex.org/W2096921767","https://openalex.org/W2097117768","https://openalex.org/W2194775991","https://openalex.org/W2265842831","https://openalex.org/W2267635142","https://openalex.org/W2883399546","https://openalex.org/W2900986841","https://openalex.org/W2919855186","https://openalex.org/W2922073769","https://openalex.org/W2947883149","https://openalex.org/W2958226831","https://openalex.org/W2963165251","https://openalex.org/W2973628901","https://openalex.org/W3088563745","https://openalex.org/W3137670093","https://openalex.org/W3155174469","https://openalex.org/W3158783080","https://openalex.org/W4280552702","https://openalex.org/W4313594499","https://openalex.org/W4323655380","https://openalex.org/W4388571407","https://openalex.org/W4391679718"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Although":[1],"packers":[2,225],"are":[3,54],"useful":[4],"tools":[5],"for":[6,24,105,218,250],"protecting":[7],"applications,":[8],"they":[9],"can":[10,159],"also":[11],"be":[12,245],"used":[13,133],"to":[14,56,68,128,171,233],"protect":[15],"malware.":[16],"This":[17],"makes":[18],"packer":[19,29,89,109,174,236,251],"identification":[20,30,90],"technology":[21],"increasingly":[22],"important":[23],"malware":[25],"analysis.":[26],"Most":[27],"existing":[28,86],"methods":[31],"based":[32,186],"on":[33,138,187,231],"static":[34,87],"analysis":[35],"extract":[36],"a":[37,96,140,149,165,180,239,246],"large":[38],"number":[39,98,151],"of":[40,46,77,85,95,99,122,152,164,224,238],"features":[41,53,72,104,157],"from":[42],"the":[43,60,74,83,114,120,123,129,135,161,173,177,188,235],"binary":[44,51,62],"code":[45],"an":[47],"executable.":[48],"However,":[49],"these":[50,71],"code-related":[52],"sensitive":[55],"small":[57,97,150],"changes":[58],"in":[59],"executable\u2019s":[61],"code,":[63],"and":[64,102,107,117,155,205,221,226,242],"it":[65],"is":[66,143,146,196],"difficult":[67],"understand":[69],"how":[70],"influence":[73],"decision-making":[75],"processes":[76],"machine":[78],"learning":[79],"models.":[80],"To":[81],"address":[82],"shortcomings":[84],"analysis-based":[88],"methods,":[91],"we":[92,112],"explore":[93],"extraction":[94],"easily":[100,153],"extractable":[101,154],"discriminative":[103,156],"efficient":[106],"accurate":[108],"identification.":[110,252],"Specifically,":[111],"analyze":[113],"packing":[115,131],"process":[116],"notice":[118],"that":[119,158,213],"structures":[121],"packed":[124],"PEs":[125],"differ":[126],"according":[127],"different":[130],"patterns":[132],"by":[134,148,176],"packer.":[136],"Based":[137],"this,":[139],"section-entropy":[141,178],"plot":[142],"proposed,":[144],"which":[145,198],"generated":[147],"reflect":[160],"overall":[162],"structure":[163],"PE":[166,202],"file.":[167],"By":[168],"using":[169],"GoogLeNet":[170],"identify":[172,234],"characterized":[175],"plot,":[179],"p":[181,193],"acker":[182],"i":[183],"dentification":[184],"method":[185],"s":[189,230],"ection-":[190],"e":[191],"ntropy":[192],"lot":[194],"(PISEP)":[195],"constructed,":[197],"does":[199],"not":[200],"require":[201],"file":[203],"disassembly":[204],"complex":[206],"feature":[207],"engineering.":[208],"The":[209],"experimental":[210],"results":[211],"show":[212],"PISEP":[214],"achieves":[215],"99.08%":[216],"accuracy":[217],"identifying":[219],"seen":[220],"unseen":[222],"types":[223],"requires":[227],"only":[228],"0.165":[229],"average":[232],"class":[237],"test":[240],"sample,":[241],"thus":[243],"could":[244],"highly":[247],"competitive":[248],"candidate":[249]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-02-16T00:00:00"}