{"id":"https://openalex.org/W4385172500","doi":"https://doi.org/10.3390/e25071099","title":"Double-Layer Detection Model of Malicious PDF Documents Based on Entropy Method with Multiple Features","display_name":"Double-Layer Detection Model of Malicious PDF Documents Based on Entropy Method with Multiple Features","publication_year":2023,"publication_date":"2023-07-23","ids":{"openalex":"https://openalex.org/W4385172500","doi":"https://doi.org/10.3390/e25071099","pmid":"https://pubmed.ncbi.nlm.nih.gov/37510046"},"language":"en","primary_location":{"id":"doi:10.3390/e25071099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25071099","pdf_url":"https://www.mdpi.com/1099-4300/25/7/1099/pdf?version=1690193708","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1099-4300/25/7/1099/pdf?version=1690193708","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112965348","display_name":"Enzhou Song","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Enzhou Song","raw_affiliation_strings":["Information Technology Institute, Information Engineering University, Zhengzhou 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Institute, Information Engineering University, Zhengzhou 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003977684","display_name":"Tao Hu","orcid":"https://orcid.org/0000-0002-4338-8215"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Tao Hu","raw_affiliation_strings":["Information Technology Institute, Information Engineering University, Zhengzhou 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Institute, Information Engineering University, Zhengzhou 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076073719","display_name":"Peng Yi","orcid":"https://orcid.org/0000-0002-0094-5982"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Yi","raw_affiliation_strings":["Information Technology Institute, Information Engineering University, Zhengzhou 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Institute, Information Engineering University, Zhengzhou 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":null,"display_name":"Wenbo Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Wang","raw_affiliation_strings":["Information Technology Institute, Information Engineering University, Zhengzhou 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Institute, Information Engineering University, Zhengzhou 450001, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5003977684"],"corresponding_institution_ids":["https://openalex.org/I169689159"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":0.3744,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.54666006,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":"25","issue":"7","first_page":"1099","last_page":"1099"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8357950448989868},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5879250764846802},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.510810136795044},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.48664793372154236},{"id":"https://openalex.org/keywords/adaboost","display_name":"AdaBoost","score":0.4861397445201874},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4793992042541504},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4511399567127228},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4231886565685272}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8357950448989868},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5879250764846802},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.510810136795044},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.48664793372154236},{"id":"https://openalex.org/C141404830","wikidata":"https://www.wikidata.org/wiki/Q2823869","display_name":"AdaBoost","level":3,"score":0.4861397445201874},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4793992042541504},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4511399567127228},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4231886565685272},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/e25071099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25071099","pdf_url":"https://www.mdpi.com/1099-4300/25/7/1099/pdf?version=1690193708","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},{"id":"pmid:37510046","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/37510046","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:pubmedcentral.nih.gov:10378245","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/10378245","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC10378245/pdf/entropy-25-01099.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy (Basel)","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:e120d5eae4b8405bb01b237a25ee61de","is_oa":true,"landing_page_url":"https://doaj.org/article/e120d5eae4b8405bb01b237a25ee61de","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy, Vol 25, Iss 7, p 1099 (2023)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1099-4300/25/7/1099/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/e25071099","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy; Volume 25; Issue 7; Pages: 1099","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/e25071099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25071099","pdf_url":"https://www.mdpi.com/1099-4300/25/7/1099/pdf?version=1690193708","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/15","score":0.47999998927116394,"display_name":"Life in Land"}],"awards":[{"id":"https://openalex.org/G575655210","display_name":null,"funder_award_id":"62176264","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385172500.pdf"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W1972531058","https://openalex.org/W1988146703","https://openalex.org/W1991603936","https://openalex.org/W2001473217","https://openalex.org/W2060514845","https://openalex.org/W2081293472","https://openalex.org/W2130789388","https://openalex.org/W2258073246","https://openalex.org/W2396643843","https://openalex.org/W2401293755","https://openalex.org/W2471456063","https://openalex.org/W2525598640","https://openalex.org/W2591926297","https://openalex.org/W2752907035","https://openalex.org/W2955474601","https://openalex.org/W2978975913","https://openalex.org/W3004645727","https://openalex.org/W3088861647","https://openalex.org/W3216134531","https://openalex.org/W4200586921","https://openalex.org/W4249404106","https://openalex.org/W4282974808","https://openalex.org/W6679331380","https://openalex.org/W7020380166"],"related_works":["https://openalex.org/W3039673966","https://openalex.org/W2002351707","https://openalex.org/W2035096001","https://openalex.org/W4293699968","https://openalex.org/W2923621274","https://openalex.org/W2327035729","https://openalex.org/W2101918547","https://openalex.org/W4312843811","https://openalex.org/W2090763504","https://openalex.org/W3112414093"],"abstract_inverted_index":{"Traditional":[0],"PDF":[1,40,120],"document":[2,125,183],"detection":[3,22,36,55,169,184],"technology":[4],"usually":[5],"builds":[6],"a":[7,34,143],"rule":[8],"or":[9],"feature":[10],"library":[11],"for":[12,20,38,175],"specific":[13],"vulnerabilities":[14],"and":[15,24,77,84,93,116,137,157],"therefore":[16],"is":[17,185],"only":[18],"fit":[19],"single":[21,54],"targets":[23],"lacks":[25],"anti-detection":[26,131],"ability.":[27],"To":[28],"address":[29,52],"these":[30],"shortcomings,":[31],"we":[32,51,96,141],"build":[33,142],"double-layer":[35,144],"model":[37,172],"malicious":[39],"documents":[41],"based":[42,113],"on":[43,114],"an":[44,110],"entropy":[45,111],"method":[46,112],"with":[47,58,122],"multiple":[48,63],"features.":[49],"First,":[50],"the":[53,59,98,152,158,166,189],"target":[56],"problem":[57],"fusion":[60],"of":[61,101,105,182],"222":[62],"features,":[64],"including":[65],"130":[66],"basic":[67],"features":[68,80,102],"(such":[69,81],"as":[70,82,134],"objects,":[71],"structure,":[72],"content":[73],"stream,":[74],"metadata,":[75],"etc.)":[76],"82":[78],"dangerous":[79],"suspicious":[83],"encoding":[85],"function,":[86],"etc.),":[87],"which":[88,127],"can":[89,128],"effectively":[90,129],"resist":[91,130],"obfuscation":[92],"encryption.":[94],"Second,":[95],"generate":[97],"best":[99],"set":[100],"(a":[103],"total":[104],"153)":[106],"by":[107],"creatively":[108],"applying":[109],"RReliefF":[115],"MIC":[117],"(EMBORAM)":[118],"to":[119,147,165],"samples":[121,149],"37":[123],"typical":[124],"vulnerabilities,":[126],"methods,":[132],"such":[133],"filling":[135],"data":[136],"imitation":[138],"attacks.":[139],"Finally,":[140],"processing":[145],"framework":[146],"detect":[148],"efficiently":[150],"through":[151],"AdaBoost-optimized":[153],"random":[154],"forest":[155],"algorithm":[156],"robustness-optimized":[159],"support":[160],"vector":[161],"machine":[162],"algorithm.":[163],"Compared":[164],"traditional":[167],"static":[168],"method,":[170],"this":[171],"performs":[173],"better":[174],"various":[176],"evaluation":[177],"criteria.":[178],"The":[179],"average":[180],"time":[181],"1.3":[186],"ms,":[187],"while":[188],"accuracy":[190],"rate":[191],"reaches":[192],"95.9%.":[193]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}