{"id":"https://openalex.org/W3192654261","doi":"https://doi.org/10.24963/ijcai.2021/209","title":"MG-DVD: A Real-time Framework for Malware Variant Detection Based on Dynamic Heterogeneous Graph Learning","display_name":"MG-DVD: A Real-time Framework for Malware Variant Detection Based on Dynamic Heterogeneous Graph Learning","publication_year":2021,"publication_date":"2021-08-01","ids":{"openalex":"https://openalex.org/W3192654261","doi":"https://doi.org/10.24963/ijcai.2021/209","mag":"3192654261"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2021/209","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2021/209","pdf_url":"https://www.ijcai.org/proceedings/2021/0209.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2021/0209.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100322200","display_name":"Chen Liu","orcid":"https://orcid.org/0000-0003-1558-6836"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Liu","raw_affiliation_strings":["Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100677404","display_name":"Bo Li","orcid":"https://orcid.org/0000-0003-1483-8077"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":["Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071321132","display_name":"Jun Zhao","orcid":"https://orcid.org/0000-0002-3004-7091"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Zhao","raw_affiliation_strings":["Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003578899","display_name":"Ming Su","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming Su","raw_affiliation_strings":["Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101901295","display_name":"Xudong Liu","orcid":"https://orcid.org/0000-0002-8504-3661"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu-Dong Liu","raw_affiliation_strings":["Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I82880672"],"apc_list":null,"apc_paid":null,"fwci":1.6316,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.86443954,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1512","last_page":"1519"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9799000024795532,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10167","display_name":"Influenza Virus Research Studies","score":0.9542999863624573,"subfield":{"id":"https://openalex.org/subfields/2713","display_name":"Epidemiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8475720882415771},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8262137770652771},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7565045952796936},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.5386568903923035},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5139853358268738},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4680316746234894},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46408602595329285},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.27825623750686646},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12421360611915588}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8475720882415771},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8262137770652771},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7565045952796936},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.5386568903923035},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5139853358268738},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4680316746234894},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46408602595329285},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27825623750686646},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12421360611915588}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2021/209","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2021/209","pdf_url":"https://www.ijcai.org/proceedings/2021/0209.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2021/209","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2021/209","pdf_url":"https://www.ijcai.org/proceedings/2021/0209.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.699999988079071}],"awards":[],"funders":[{"id":"https://openalex.org/F4320329053","display_name":"Beijing Advanced Innovation Center for Big Data and Brain Computing","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3192654261.pdf","grobid_xml":"https://content.openalex.org/works/W3192654261.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1545528966","https://openalex.org/W1975563293","https://openalex.org/W2490191290","https://openalex.org/W2498359591","https://openalex.org/W2563273224","https://openalex.org/W2743159750","https://openalex.org/W2781561856","https://openalex.org/W2889682758","https://openalex.org/W2905425764","https://openalex.org/W2939746199","https://openalex.org/W2963695795","https://openalex.org/W2965563623","https://openalex.org/W2966270452","https://openalex.org/W2998010923","https://openalex.org/W4210257598","https://openalex.org/W4294558607","https://openalex.org/W4297747285"],"related_works":["https://openalex.org/W2905433371","https://openalex.org/W4390569940","https://openalex.org/W2888392564","https://openalex.org/W4361193272","https://openalex.org/W4310278675","https://openalex.org/W4388422664","https://openalex.org/W2806259446","https://openalex.org/W2963326959","https://openalex.org/W1986582023","https://openalex.org/W2966829450"],"abstract_inverted_index":{"Detecting":[0],"the":[1,46,100,103,114],"newly":[2],"emerging":[3],"malware":[4,37,52,63,75,95,118,147],"variants":[5,38,53,119,148],"in":[6,39,120,145,149],"real":[7,40,121],"time":[8],"is":[9,111],"crucial":[10],"for":[11],"mitigating":[12],"cyber":[13],"risks":[14],"and":[15,58,76,123,153],"proactively":[16],"blocking":[17],"intrusions.":[18],"In":[19],"this":[20],"paper,":[21],"we":[22],"propose":[23],"MG-DVD,":[24],"a":[25,108],"novel":[26],"detection":[27],"framework":[28],"based":[29],"on":[30,134],"dynamic":[31,55,83],"heterogeneous":[32,56,85],"graph":[33,86,105],"learning,":[34],"to":[35,89,116],"detect":[36,117],"time.":[41],"Particularly,":[42],"MG-DVD":[43,80,110,141],"first":[44],"models":[45],"fine-grained":[47],"execution":[48],"event":[49],"streams":[50],"of":[51,94,102,151],"into":[54],"graphs":[57],"investigates":[59],"real-world":[60],"meta-graphs":[61],"between":[62,74],"objects,":[64],"which":[65,97],"can":[66],"effectively":[67],"characterize":[68],"more":[69,91],"discriminative":[70],"malicious":[71],"evolutionary":[72],"patterns":[73],"their":[77],"variants.":[78],"Then,":[79],"presents":[81,125],"two":[82],"walk-based":[84],"learning":[87],"methods":[88,144],"learn":[90],"comprehensive":[92],"representations":[93],"variants,":[96],"significantly":[98],"reduces":[99],"cost":[101],"entire":[104],"retraining.":[106],"As":[107],"result,":[109],"equipped":[112],"with":[113],"ability":[115],"time,":[122],"it":[124],"better":[126],"interpretability":[127],"by":[128],"introducing":[129],"meaningful":[130],"meta-graphs.":[131],"Comprehensive":[132],"experiments":[133],"large-scale":[135],"samples":[136],"prove":[137],"that":[138],"our":[139],"proposed":[140],"outperforms":[142],"state-of-the-art":[143],"detecting":[146],"terms":[150],"effectiveness":[152],"efficiency.":[154]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}