{"id":"https://openalex.org/W4224303482","doi":"https://doi.org/10.3233/jifs-212496","title":"DDIML: Explainable detection model for drive-by-download attacks","display_name":"DDIML: Explainable detection model for drive-by-download attacks","publication_year":2022,"publication_date":"2022-04-22","ids":{"openalex":"https://openalex.org/W4224303482","doi":"https://doi.org/10.3233/jifs-212496"},"language":"en","primary_location":{"id":"doi:10.3233/jifs-212496","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-212496","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106033870","display_name":"Xiaole Liu","orcid":"https://orcid.org/0009-0006-3605-8206"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaole Liu","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075394107","display_name":"Cheng Huang","orcid":"https://orcid.org/0000-0002-5871-946X"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Cheng Huang","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100606641","display_name":"Yong Fang","orcid":"https://orcid.org/0000-0003-2736-0615"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Fang","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5075394107"],"corresponding_institution_ids":["https://openalex.org/I24185976"],"apc_list":null,"apc_paid":null,"fwci":0.2972,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.48277013,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":"43","issue":"3","first_page":"3429","last_page":"3442"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8803764581680298},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6430844068527222},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5464911460876465},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5440821051597595},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5243363976478577},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4935351610183716},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48849809169769287},{"id":"https://openalex.org/keywords/download","display_name":"Download","score":0.48484790325164795},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.4752376079559326},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45904913544654846},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.452729195356369},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.43581241369247437},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.4147523045539856},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.223871111869812},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1993548572063446},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19780558347702026}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8803764581680298},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6430844068527222},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5464911460876465},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5440821051597595},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5243363976478577},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4935351610183716},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48849809169769287},{"id":"https://openalex.org/C2780154274","wikidata":"https://www.wikidata.org/wiki/Q7126717","display_name":"Download","level":2,"score":0.48484790325164795},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.4752376079559326},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45904913544654846},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.452729195356369},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.43581241369247437},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.4147523045539856},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.223871111869812},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1993548572063446},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19780558347702026}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jifs-212496","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-212496","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5699999928474426,"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2031216145","https://openalex.org/W2139868346","https://openalex.org/W2625940748","https://openalex.org/W2800651024","https://openalex.org/W2969612742","https://openalex.org/W3007497615","https://openalex.org/W3025866629","https://openalex.org/W3034934361","https://openalex.org/W3035706145","https://openalex.org/W3120667286","https://openalex.org/W3128187337"],"related_works":["https://openalex.org/W4233213551","https://openalex.org/W2968586400","https://openalex.org/W4312372161","https://openalex.org/W4249229055","https://openalex.org/W4316087074","https://openalex.org/W2763112851","https://openalex.org/W3128869258","https://openalex.org/W2899560833","https://openalex.org/W4205537931","https://openalex.org/W4224303482"],"abstract_inverted_index":{"A":[0],"drive-by":[1,30,177],"download":[2],"is":[3,82,136,197],"a":[4,78,180,186],"method":[5],"of":[6,35,183,188],"hackers":[7],"planting":[8],"the":[9,36,47,85,94,140,155,160],"Web":[10],"Trojan,":[11],"which":[12,59,76],"exploits":[13],"browser":[14],"vulnerabilities":[15],"to":[16,55,68,90,153],"execute":[17],"malicious":[18],"software.":[19],"Because":[20],"people":[21],"usually":[22],"access":[23],"web":[24],"pages":[25],"with":[26,51,84,107,179],"various":[27],"browsers":[28],"daily,":[29],"downloads":[31,178],"have":[32],"become":[33],"one":[34],"most":[37,129],"common":[38],"threats":[39],"in":[40,200],"recent":[41],"years.":[42],"Most":[43],"previous":[44],"studies":[45],"utilize":[46],"abstract":[48],"syntax":[49],"tree(AST)":[50],"deep":[52],"learning":[53,101,132],"methods":[54,72],"detect":[56,176],"such":[57],"attacks,":[58],"achieved":[60],"high":[61],"accuracy":[62],"but":[63],"are":[64,112],"time-consuming":[65,83],"and":[66,81,125,150,157,185],"challenging":[67],"explain.":[69],"Also,":[70],"some":[71],"use":[73,147],"dynamic":[74],"analysis,":[75],"needs":[77],"specific":[79],"environment":[80],"complex":[86],"operation.":[87],"In":[88,144],"order":[89],"solve":[91],"these":[92],"problems,":[93],"paper":[95],"proposes":[96],"DDIML,":[97],"an":[98],"explainable":[99],"machine":[100,131],"model":[102,156,162,173],"based":[103],"on":[104],"novel":[105],"features":[106,111],"static":[108],"analysis.":[109],"These":[110],"extracted":[113],"from":[114],"five":[115],"aspects:":[116],"code":[117],"obfuscation,":[118],"URL":[119],"redirection,":[120],"special":[121],"behaviors,":[122],"encoding":[123],"characters,":[124],"CSS":[126],"attributes.":[127],"The":[128,166,190],"popular":[130],"algorithm,":[133],"Random":[134],"forest,":[135],"applied":[137],"for":[138,194],"building":[139],"classifier":[141],"detection":[142,181,192],"model.":[143],"addition,":[145],"we":[146],"both":[148],"local":[149],"global":[151],"explanations":[152],"improve":[154],"prove":[158],"that":[159,170],"proposed":[161,172],"could":[163],"be":[164],"trusted.":[165],"Experimental":[167],"results":[168],"show":[169],"our":[171],"can":[174],"efficiently":[175],"precision":[182],"0.983":[184],"recall":[187],"0.980.":[189],"average":[191],"time":[193],"each":[195],"sample":[196],"only":[198],"16.07ms":[199],"total.":[201]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}