{"id":"https://openalex.org/W3002796207","doi":"https://doi.org/10.3233/jcs-191313","title":"Identifying parasitic malware as outliers by\u00a0code clustering","display_name":"Identifying parasitic malware as outliers by\u00a0code clustering","publication_year":2020,"publication_date":"2020-01-24","ids":{"openalex":"https://openalex.org/W3002796207","doi":"https://doi.org/10.3233/jcs-191313","mag":"3002796207"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-191313","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191313","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102961771","display_name":"Hongcheng Li","orcid":"https://orcid.org/0000-0003-2790-5216"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongcheng Li","raw_affiliation_strings":["Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","School of Information, Renmin University of China, Beijing, China","Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"School of Information, Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037117080","display_name":"Jianjun Huang","orcid":"https://orcid.org/0000-0003-4403-0060"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jianjun Huang","raw_affiliation_strings":["Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","School of Information, Renmin University of China, Beijing, China","Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"School of Information, Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100644627","display_name":"Bin Liang","orcid":"https://orcid.org/0000-0002-4818-7164"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Liang","raw_affiliation_strings":["Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","School of Information, Renmin University of China, Beijing, China","Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"School of Information, Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017405627","display_name":"Wenchang Shi","orcid":"https://orcid.org/0000-0002-5160-1223"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenchang Shi","raw_affiliation_strings":["Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","School of Information, Renmin University of China, Beijing, China","Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"School of Information, Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034903168","display_name":"Yi-Fang Wu","orcid":"https://orcid.org/0000-0001-6580-426X"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifang Wu","raw_affiliation_strings":["Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","School of Information, Renmin University of China, Beijing, China","Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"School of Information, Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101433836","display_name":"Shilei Bai","orcid":"https://orcid.org/0000-0002-8627-9027"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shilei Bai","raw_affiliation_strings":["Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","School of Information, Renmin University of China, Beijing, China","Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0,\u00a0,\u00a0,\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"School of Information, Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]},{"raw_affiliation_string":"Key Laboratory of DEKE, Renmin University of China, MOE, China. E-mails:\u00a0owenlee@ruc.edu.cn,\u00a0hjj@ruc.edu.cn,\u00a0liangb@ruc.edu.cn,\u00a0wenchang@ruc.edu.cn,\u00a0lizhiwuyi@ruc.edu.cn,\u00a0baishilei@ruc.edu.cn","institution_ids":["https://openalex.org/I78988378"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5037117080"],"corresponding_institution_ids":["https://openalex.org/I78988378"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.01195219,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":"2","first_page":"157","last_page":"189"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9771999716758728,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9722999930381775,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.837921142578125},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8055503368377686},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6861772537231445},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5171613097190857},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.4963410496711731},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.48633939027786255},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4770214557647705},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.43936747312545776},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3577090799808502},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.30187150835990906},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.23866283893585205},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2203388214111328}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.837921142578125},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8055503368377686},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6861772537231445},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5171613097190857},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.4963410496711731},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.48633939027786255},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4770214557647705},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.43936747312545776},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3577090799808502},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30187150835990906},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.23866283893585205},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2203388214111328},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jcs-191313","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191313","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W60817130","https://openalex.org/W151347844","https://openalex.org/W183494281","https://openalex.org/W642857915","https://openalex.org/W1420805064","https://openalex.org/W1445387515","https://openalex.org/W1598700299","https://openalex.org/W1818475207","https://openalex.org/W1971497680","https://openalex.org/W1976596267","https://openalex.org/W1980867644","https://openalex.org/W1980874575","https://openalex.org/W1999343774","https://openalex.org/W2002083372","https://openalex.org/W2004209351","https://openalex.org/W2032724464","https://openalex.org/W2064038877","https://openalex.org/W2072139392","https://openalex.org/W2080696000","https://openalex.org/W2088479623","https://openalex.org/W2090061444","https://openalex.org/W2091085572","https://openalex.org/W2111525908","https://openalex.org/W2112731379","https://openalex.org/W2131523719","https://openalex.org/W2151135920","https://openalex.org/W2286924183","https://openalex.org/W2314180245","https://openalex.org/W2400269587","https://openalex.org/W2401896535","https://openalex.org/W2407313496","https://openalex.org/W2470924201","https://openalex.org/W2532717356","https://openalex.org/W2532962075","https://openalex.org/W2586881135","https://openalex.org/W2593931672","https://openalex.org/W2601621757","https://openalex.org/W2618014206","https://openalex.org/W2620844046","https://openalex.org/W2626912599","https://openalex.org/W2733553512","https://openalex.org/W2740060156","https://openalex.org/W2752485287","https://openalex.org/W2762765745","https://openalex.org/W2775172862","https://openalex.org/W2781198008","https://openalex.org/W2963213304","https://openalex.org/W3157780429","https://openalex.org/W4244355726","https://openalex.org/W4285719527","https://openalex.org/W6600574797","https://openalex.org/W6603450438"],"related_works":["https://openalex.org/W2582981600","https://openalex.org/W4389238932","https://openalex.org/W4387467152","https://openalex.org/W3010413952","https://openalex.org/W4212885212","https://openalex.org/W4253989935","https://openalex.org/W1975357770","https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W4312334973"],"abstract_inverted_index":{"Injecting":[0],"malicious":[1],"code":[2,72,108],"into":[3,84],"benign":[4,198],"programs":[5],"is":[6,39,128],"popular":[7,237],"in":[8,47,57,134,155],"spreading":[9],"malware.":[10,61,100],"Unfortunately,":[11],"for":[12],"detection,":[13],"the":[14,18,21,33,36,52,55,66,71,75,87,90,95,118,122,144,149,168,192,223,236,241,244],"prior":[15],"knowledge":[16],"about":[17],"malware,":[19,117],"e.g.,":[20],"behavior":[22],"or":[23,147],"implementation":[24],"patterns,":[25],"isn\u2019t":[26],"always":[27],"available.":[28],"Our":[29],"observation":[30],"shows":[31,138,216],"that":[32],"logic":[34],"of":[35,59,116,173,189,213,220,231,243],"host":[37,53],"program":[38,83],"normally":[40],"unclear":[41],"to":[42,97,111,143,181,195],"parasitic":[43,60],"malware":[44,127],"developers,":[45],"resulting":[46],"very":[48],"few":[49],"interactions":[50],"between":[51],"and":[54,92,121,183,228],"payloads":[56],"lots":[58],"Thus":[62],"we":[63,79,104,177,200,234],"can":[64],"expose":[65],"injected":[67],"part":[68],"by":[69],"grouping":[70],"based":[73],"on":[74,170,210],"interactive":[76],"relations.":[77],"Particularly,":[78],"partition":[80],"a":[81,106,135,139,229],"target":[82],"modules,":[85],"extract":[86],"relations,":[88],"cluster":[89,161],"modules":[91],"further":[93],"inspect":[94],"outliers":[96],"identify":[98,201],"such":[99],"In":[101,206],"this":[102],"paper,":[103],"design":[105],"two-stage":[107],"clustering-based":[109],"approach":[110,169],"detecting":[112],"two":[113],"representative":[114],"types":[115],"UEFI":[119,136,175],"rootkits":[120],"piggybacked":[123],"Android":[124,157,214],"applications.":[125],"Parasitic":[126],"reported":[129],"when":[130,222],"(1)":[131],"any":[132],"outlier":[133,151],"firmware":[137],"relatively":[140],"long":[141],"distance":[142,152],"largest":[145,150],"cluster,":[146],"(2)":[148],"exceeds":[153],"zero":[154],"an":[156,185,217],"application,":[158],"i.e.,":[159],"multiple":[160],"exist":[162],"after":[163],"re-clustering":[164],"outliers.":[165],"We":[166],"evaluate":[167],"35":[171],"pairs":[172,212],"benign/infected":[174],"samples":[176],"do":[178],"our":[179,208],"best":[180],"get":[182],"achieve":[184],"overall":[186],"F1":[187,218],"score.":[188],"100%.":[190],"Applying":[191],"learned":[193],"threshold":[194],"50":[196],"other":[197],"firmwares,":[199],"them":[202],"without":[203],"false":[204],"positives.":[205],"addition,":[207],"evaluation":[209],"1079":[211],"applications,":[215],"score":[219,230],"90.66%":[221],"third-party":[224,238],"libraries":[225],"are":[226],"eliminated":[227],"87.36%":[232],"if":[233],"keep":[235],"libraries,":[239],"demonstrating":[240],"effectiveness":[242],"approach.":[245]},"counts_by_year":[],"updated_date":"2026-05-04T08:30:34.212998","created_date":"2025-10-10T00:00:00"}