{"id":"https://openalex.org/W4403677591","doi":"https://doi.org/10.23919/softcom62040.2024.10721992","title":"Heuristic Malware Detection Method Based on Structured CTI Data: A Research Study and Proposal","display_name":"Heuristic Malware Detection Method Based on Structured CTI Data: A Research Study and Proposal","publication_year":2024,"publication_date":"2024-09-26","ids":{"openalex":"https://openalex.org/W4403677591","doi":"https://doi.org/10.23919/softcom62040.2024.10721992"},"language":"en","primary_location":{"id":"doi:10.23919/softcom62040.2024.10721992","is_oa":false,"landing_page_url":"https://doi.org/10.23919/softcom62040.2024.10721992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093419873","display_name":"Pavel Novak","orcid":"https://orcid.org/0009-0000-5488-2190"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Pavel Novak","raw_affiliation_strings":["Masaryk University Brno,Department of Computer Systems and Communications Faculty of Informatics,Czechia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University Brno,Department of Computer Systems and Communications Faculty of Informatics,Czechia","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018939391","display_name":"V\u00e1clav Oujezsk\u00fd","orcid":"https://orcid.org/0000-0001-7629-6299"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Vaclav Oujezsky","raw_affiliation_strings":["Masaryk University Brno,Department of Computer Systems and Communications Faculty of Informatics,Czechia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University Brno,Department of Computer Systems and Communications Faculty of Informatics,Czechia","institution_ids":["https://openalex.org/I21449261"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I21449261"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18855932,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9635000228881836,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8298721313476562},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7217745780944824},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.5130296945571899},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3921988308429718},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3381403088569641},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22819849848747253}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8298721313476562},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7217745780944824},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.5130296945571899},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3921988308429718},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3381403088569641},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22819849848747253}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/softcom62040.2024.10721992","is_oa":false,"landing_page_url":"https://doi.org/10.23919/softcom62040.2024.10721992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1639956611","https://openalex.org/W2533698187","https://openalex.org/W2771963642","https://openalex.org/W2911005136","https://openalex.org/W2952280772","https://openalex.org/W3024317787","https://openalex.org/W3206415475","https://openalex.org/W3211888892","https://openalex.org/W4205814501","https://openalex.org/W4283214123","https://openalex.org/W4312726289","https://openalex.org/W4385575191","https://openalex.org/W4385688053","https://openalex.org/W4387298166","https://openalex.org/W4391542165","https://openalex.org/W4392639638","https://openalex.org/W6959601886"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819"],"abstract_inverted_index":{"This":[0,45,109],"article":[1],"addresses":[2],"the":[3,117,130],"significant":[4],"and":[5,20,74,123,137],"evolving":[6],"threat":[7,58,141],"of":[8,31,65,86,107,114,139],"malware,":[9,115],"particularly":[10],"ransomware,":[11],"to":[12,52,81,102,120],"critical":[13],"infrastructure":[14],"sectors":[15],"such":[16,67],"as":[17,68],"energy,":[18],"banking,":[19],"food":[21],"supply.":[22],"Traditional":[23],"detection":[24,54,91,113],"methods":[25],"that":[26],"rely":[27],"on":[28],"specific":[29],"indicators":[30,64,106],"compromise,":[32],"like":[33],"file":[34,69],"hashes":[35],"or":[36],"IP":[37],"addresses,":[38],"can":[39],"be":[40],"easily":[41],"circumvented":[42],"by":[43],"attackers.":[44],"paper":[46],"presents":[47],"a":[48],"novel":[49],"heuristic":[50],"approach":[51,110],"malware":[53,87],"using":[55],"structured":[56],"cyber":[57,140],"intelligence":[59,142],"data.":[60,143],"By":[61],"aggregating":[62],"high-level":[63],"compromise":[66],"modifications,":[70],"registry":[71],"key":[72],"changes,":[73],"suspicious":[75],"network":[76],"communications,":[77],"this":[78],"method":[79],"aims":[80],"identify":[82],"malicious":[83],"patterns":[84],"indicative":[85],"behavior.":[88],"The":[89,127],"proposed":[90],"system":[92,128],"employs":[93],"advanced":[94],"machine":[95],"learning":[96],"techniques,":[97],"including":[98],"graph":[99],"neural":[100],"networks,":[101],"analyze":[103],"these":[104],"aggregated":[105],"compromise.":[108],"enables":[111],"earlier":[112],"reduces":[116],"mean":[118],"time":[119],"detect":[121],"breaches,":[122],"minimizes":[124],"false":[125],"positives.":[126],"utilizes":[129],"STIX":[131],"data":[132],"format":[133],"for":[134],"improved":[135],"interoperability":[136],"analysis":[138]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}