{"id":"https://openalex.org/W3206882412","doi":"https://doi.org/10.14428/esann/2021.es2021-82","title":"Robust Malware Classification via Deep Graph Networks on Call Graph Topologies","display_name":"Robust Malware Classification via Deep Graph Networks on Call Graph Topologies","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3206882412","doi":"https://doi.org/10.14428/esann/2021.es2021-82","mag":"3206882412"},"language":"en","primary_location":{"id":"doi:10.14428/esann/2021.es2021-82","is_oa":true,"landing_page_url":"https://doi.org/10.14428/esann/2021.es2021-82","pdf_url":"https://doi.org/10.14428/esann/2021.es2021-82","source":{"id":"https://openalex.org/S4306509709","display_name":"ESANN 2021 proceedings","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ESANN 2021 proceedings","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.14428/esann/2021.es2021-82","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084297425","display_name":"Federico Errica","orcid":"https://orcid.org/0000-0001-5181-2904"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Federico Errica","raw_affiliation_strings":["-University of Pisa, Department of Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"-University of Pisa, Department of Computer Science","institution_ids":["https://openalex.org/I108290504"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080298186","display_name":"Giacomo Iadarola","orcid":"https://orcid.org/0000-0001-7060-6233"},"institutions":[{"id":"https://openalex.org/I4210130157","display_name":"Institute of Informatics and Telematics","ror":"https://ror.org/02gdcn153","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]},{"id":"https://openalex.org/I4210155236","display_name":"National Research Council","ror":"https://ror.org/04zaypm56","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giacomo Iadarola","raw_affiliation_strings":["-Institute of Informatics and Telematics, National Research Council of Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"-Institute of Informatics and Telematics, National Research Council of Italy","institution_ids":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101546784","display_name":"Fabio Martinelli","orcid":"https://orcid.org/0000-0002-6721-9395"},"institutions":[{"id":"https://openalex.org/I4210130157","display_name":"Institute of Informatics and Telematics","ror":"https://ror.org/02gdcn153","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]},{"id":"https://openalex.org/I4210155236","display_name":"National Research Council","ror":"https://ror.org/04zaypm56","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Martinelli","raw_affiliation_strings":["-Institute of Informatics and Telematics, National Research Council of Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"-Institute of Informatics and Telematics, National Research Council of Italy","institution_ids":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023695406","display_name":"Francesco Mercaldo","orcid":"https://orcid.org/0000-0002-9425-1657"},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]},{"id":"https://openalex.org/I4210130157","display_name":"Institute of Informatics and Telematics","ror":"https://ror.org/02gdcn153","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]},{"id":"https://openalex.org/I4210155236","display_name":"National Research Council","ror":"https://ror.org/04zaypm56","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Mercaldo","raw_affiliation_strings":["-Institute of Informatics and Telematics, National Research Council of Italy","-University of Molise, Department of Medicine and Health Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"-Institute of Informatics and Telematics, National Research Council of Italy","institution_ids":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]},{"raw_affiliation_string":"-University of Molise, Department of Medicine and Health Sciences","institution_ids":["https://openalex.org/I129627893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010923663","display_name":"Alessio Micheli","orcid":"https://orcid.org/0000-0001-5764-5238"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alessio Micheli","raw_affiliation_strings":["-University of Pisa, Department of Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"-University of Pisa, Department of Computer Science","institution_ids":["https://openalex.org/I108290504"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5439,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.63031474,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"369","last_page":"374"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7391248345375061},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6932216882705688},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.6880495548248291},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5118212103843689},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.43738532066345215},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3503703773021698},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21040087938308716}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7391248345375061},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6932216882705688},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.6880495548248291},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5118212103843689},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.43738532066345215},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3503703773021698},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21040087938308716}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.14428/esann/2021.es2021-82","is_oa":true,"landing_page_url":"https://doi.org/10.14428/esann/2021.es2021-82","pdf_url":"https://doi.org/10.14428/esann/2021.es2021-82","source":{"id":"https://openalex.org/S4306509709","display_name":"ESANN 2021 proceedings","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ESANN 2021 proceedings","raw_type":"proceedings-article"},{"id":"pmh:oai:arpi.unipi.it:11568/1136385","is_oa":false,"landing_page_url":"http://hdl.handle.net/11568/1136385","pdf_url":null,"source":{"id":"https://openalex.org/S4377196265","display_name":"CINECA IRIS Institutial research information system (University of Pisa)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I108290504","host_organization_name":"University of Pisa","host_organization_lineage":["https://openalex.org/I108290504"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.14428/esann/2021.es2021-82","is_oa":true,"landing_page_url":"https://doi.org/10.14428/esann/2021.es2021-82","pdf_url":"https://doi.org/10.14428/esann/2021.es2021-82","source":{"id":"https://openalex.org/S4306509709","display_name":"ESANN 2021 proceedings","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ESANN 2021 proceedings","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321873","display_name":"Ministero dell\u2019Istruzione, dell\u2019Universit\u00e0 e della Ricerca","ror":"https://ror.org/0166hxq48"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3206882412.pdf","grobid_xml":"https://content.openalex.org/works/W3206882412.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W1947535385","https://openalex.org/W2044751544","https://openalex.org/W2053001225","https://openalex.org/W2092942461","https://openalex.org/W2167003418","https://openalex.org/W2304489333","https://openalex.org/W2558748708","https://openalex.org/W2803881248","https://openalex.org/W2887787078","https://openalex.org/W2907492528","https://openalex.org/W2951823788","https://openalex.org/W2964065761","https://openalex.org/W2995983896","https://openalex.org/W2997785591","https://openalex.org/W3047991353","https://openalex.org/W3101708437","https://openalex.org/W3106390645","https://openalex.org/W3125596609","https://openalex.org/W4210257598","https://openalex.org/W4287991183"],"related_works":["https://openalex.org/W2259219744","https://openalex.org/W1936417930","https://openalex.org/W1827256152","https://openalex.org/W3042673639","https://openalex.org/W3016595359","https://openalex.org/W2774686757","https://openalex.org/W2130966263","https://openalex.org/W4205985752","https://openalex.org/W4288089511","https://openalex.org/W2982149258"],"abstract_inverted_index":{"We":[0],"propose":[1],"a":[2,32,65],"malware":[3],"classification":[4,67],"system":[5],"that":[6,51],"is":[7,42,58],"shown":[8],"to":[9,12,60],"be":[10],"robust":[11],"some":[13],"common":[14],"intra-procedural":[15],"obfuscation":[16],"techniques.":[17],"Indeed,":[18],"by":[19,44],"training":[20],"the":[21,27,52,55],"Contextual":[22],"Graph":[23],"Markov":[24],"Model":[25],"on":[26,64],"call":[28,56],"graph":[29,57],"representation":[30],"of":[31,54],"program,":[33],"we":[34,49],"classify":[35],"it":[36],"using":[37],"only":[38],"topological":[39],"information,":[40],"which":[41],"unaffected":[43],"such":[45],"obfuscations.":[46],"In":[47],"particular,":[48],"show":[50],"structure":[53],"sufficient":[59],"achieve":[61],"good":[62],"accuracy":[63],"multi-class":[66],"benchmark.":[68]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}