{"id":"https://openalex.org/W4403400898","doi":"https://doi.org/10.3390/fi16100369","title":"Malware Detection Based on API Call Sequence Analysis: A Gated Recurrent Unit\u2013Generative Adversarial Network Model Approach","display_name":"Malware Detection Based on API Call Sequence Analysis: A Gated Recurrent Unit\u2013Generative Adversarial Network Model Approach","publication_year":2024,"publication_date":"2024-10-13","ids":{"openalex":"https://openalex.org/W4403400898","doi":"https://doi.org/10.3390/fi16100369"},"language":"en","primary_location":{"id":"doi:10.3390/fi16100369","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi16100369","pdf_url":"https://www.mdpi.com/1999-5903/16/10/369/pdf?version=1728911425","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/16/10/369/pdf?version=1728911425","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006442034","display_name":"Nsikak Owoh","orcid":"https://orcid.org/0000-0002-4840-9345"},"institutions":[{"id":"https://openalex.org/I195939026","display_name":"Glasgow Caledonian University","ror":"https://ror.org/03dvm1235","country_code":"GB","type":"education","lineage":["https://openalex.org/I195939026"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Nsikak Owoh","raw_affiliation_strings":["Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK","institution_ids":["https://openalex.org/I195939026"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093495470","display_name":"John Adejoh","orcid":"https://orcid.org/0009-0007-6133-6092"},"institutions":[{"id":"https://openalex.org/I2799873615","display_name":"African Institute of Science and Technology","ror":"https://ror.org/05rcqrz41","country_code":"NG","type":"education","lineage":["https://openalex.org/I2799873615"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"John Adejoh","raw_affiliation_strings":["Department of Software Engineering, African University of Science and Technology, Abuja 900107, Nigeria"],"raw_orcid":"https://orcid.org/0009-0007-6133-6092","affiliations":[{"raw_affiliation_string":"Department of Software Engineering, African University of Science and Technology, Abuja 900107, Nigeria","institution_ids":["https://openalex.org/I2799873615"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022764325","display_name":"Salaheddin Hosseinzadeh","orcid":"https://orcid.org/0000-0001-6253-5287"},"institutions":[{"id":"https://openalex.org/I195939026","display_name":"Glasgow Caledonian University","ror":"https://ror.org/03dvm1235","country_code":"GB","type":"education","lineage":["https://openalex.org/I195939026"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Salaheddin Hosseinzadeh","raw_affiliation_strings":["Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK"],"raw_orcid":"https://orcid.org/0000-0001-6253-5287","affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK","institution_ids":["https://openalex.org/I195939026"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085428147","display_name":"Moses Ashawa","orcid":"https://orcid.org/0000-0002-1016-0791"},"institutions":[{"id":"https://openalex.org/I195939026","display_name":"Glasgow Caledonian University","ror":"https://ror.org/03dvm1235","country_code":"GB","type":"education","lineage":["https://openalex.org/I195939026"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Moses Ashawa","raw_affiliation_strings":["Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK"],"raw_orcid":"https://orcid.org/0000-0002-1016-0791","affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK","institution_ids":["https://openalex.org/I195939026"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067594566","display_name":"Jude Osamor","orcid":"https://orcid.org/0000-0002-3739-8521"},"institutions":[{"id":"https://openalex.org/I94951947","display_name":"University of Westminster","ror":"https://ror.org/04ycpbx82","country_code":"GB","type":"education","lineage":["https://openalex.org/I94951947"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jude Osamor","raw_affiliation_strings":["School of Computer Science and Engineering, University of Westminster, 309 Regent Street, London W1B 2HW, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Westminster, 309 Regent Street, London W1B 2HW, UK","institution_ids":["https://openalex.org/I94951947"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110700381","display_name":"Ayyaz Ul Haq Qureshi","orcid":null},"institutions":[{"id":"https://openalex.org/I195939026","display_name":"Glasgow Caledonian University","ror":"https://ror.org/03dvm1235","country_code":"GB","type":"education","lineage":["https://openalex.org/I195939026"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ayyaz Qureshi","raw_affiliation_strings":["Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Networks, Glasgow Caledonian University, Glasgow G4 0BA, UK","institution_ids":["https://openalex.org/I195939026"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5006442034"],"corresponding_institution_ids":["https://openalex.org/I195939026"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":6.2689,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":{"value":0.97362276,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"16","issue":"10","first_page":"369","last_page":"369"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9588000178337097,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9587000012397766,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9261233806610107},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7052827477455139},{"id":"https://openalex.org/keywords/generative-adversarial-network","display_name":"Generative adversarial network","score":0.5335204005241394},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.5010735988616943},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.484611839056015},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4841776192188263},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43786224722862244},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3965420722961426},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37977367639541626},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.35585665702819824},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.28863078355789185},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.20876368880271912}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9261233806610107},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7052827477455139},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.5335204005241394},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.5010735988616943},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.484611839056015},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4841776192188263},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43786224722862244},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3965420722961426},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37977367639541626},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35585665702819824},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28863078355789185},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.20876368880271912},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/fi16100369","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi16100369","pdf_url":"https://www.mdpi.com/1999-5903/16/10/369/pdf?version=1728911425","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:researchonline.gcu.ac.uk:openaire/4c91d651-9028-4e24-9bbf-2efb07115e1d","is_oa":true,"landing_page_url":"https://researchonline.gcu.ac.uk/en/publications/4c91d651-9028-4e24-9bbf-2efb07115e1d","pdf_url":"https://researchonline.gcu.ac.uk/ws/files/94811225/94810143.pdf","source":{"id":"https://openalex.org/S4306402566","display_name":"ResearchOnline (Glasgow Caledonian University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I195939026","host_organization_name":"Glasgow Caledonian University","host_organization_lineage":["https://openalex.org/I195939026"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Owoh, N, Adejoh, J, Hosseinzadeh, S, Ashawa, M, Osamor, J & Qureshi, A 2024, 'Malware detection based on API call sequence analysis: a gated recurrent unit\u2013generative adversarial network model approach', Future Internet, vol. 16, no. 10, 369. https://doi.org/10.3390/fi16100369","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:RePEc:gam:jftint:v:16:y:2024:i:10:p:369-:d:1497719","is_oa":false,"landing_page_url":"https://www.mdpi.com/1999-5903/16/10/369/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:8f6d30b27d004b05bf36d4722e439eae","is_oa":false,"landing_page_url":"https://doaj.org/article/8f6d30b27d004b05bf36d4722e439eae","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 16, Iss 10, p 369 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/fi16100369","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi16100369","pdf_url":"https://www.mdpi.com/1999-5903/16/10/369/pdf?version=1728911425","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403400898.pdf","grobid_xml":"https://content.openalex.org/works/W4403400898.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W1573526548","https://openalex.org/W2732916693","https://openalex.org/W2893176864","https://openalex.org/W2895892359","https://openalex.org/W2950005521","https://openalex.org/W2990527448","https://openalex.org/W2996806689","https://openalex.org/W2998074434","https://openalex.org/W3000953536","https://openalex.org/W3007234217","https://openalex.org/W3045322569","https://openalex.org/W3122391591","https://openalex.org/W3130625521","https://openalex.org/W3135185324","https://openalex.org/W3163762283","https://openalex.org/W3180190113","https://openalex.org/W4293762926","https://openalex.org/W4296466829","https://openalex.org/W4308069780","https://openalex.org/W4313216189","https://openalex.org/W4320013936","https://openalex.org/W4323777752","https://openalex.org/W4360857816","https://openalex.org/W4366687195","https://openalex.org/W4367181633","https://openalex.org/W4377941395","https://openalex.org/W4385076171","https://openalex.org/W4385730485","https://openalex.org/W4388571407","https://openalex.org/W4391216250","https://openalex.org/W4394909867","https://openalex.org/W7034280434"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2888032422","https://openalex.org/W2996316059","https://openalex.org/W4385421777","https://openalex.org/W4377980832","https://openalex.org/W2897769091","https://openalex.org/W2845413374","https://openalex.org/W3005996785","https://openalex.org/W4297411772","https://openalex.org/W4235873501"],"abstract_inverted_index":{"Malware":[0],"remains":[1,105],"a":[2,9,43,49,111],"major":[3],"threat":[4],"to":[5,25,124],"computer":[6],"systems,":[7],"with":[8,185],"vast":[10],"number":[11],"of":[12,97,166],"new":[13],"samples":[14],"being":[15],"identified":[16],"and":[17,31,72,122,152,188,191],"documented":[18],"regularly.":[19],"Windows":[20,134],"systems":[21],"are":[22],"particularly":[23],"vulnerable":[24],"malicious":[26],"programs":[27],"like":[28,146],"viruses,":[29],"worms,":[30],"trojans.":[32],"Dynamic":[33],"analysis,":[34],"which":[35,65],"involves":[36],"observing":[37],"malware":[38,71,86,126],"behavior":[39],"during":[40],"execution":[41],"in":[42,78,84,182],"controlled":[44],"environment,":[45],"has":[46],"emerged":[47],"as":[48],"powerful":[50],"technique":[51],"for":[52,102],"detection.":[53],"This":[54,108],"approach":[55],"often":[56],"focuses":[57],"on":[58,129,158,173],"analyzing":[59],"Application":[60],"Programming":[61],"Interface":[62],"(API)":[63],"calls,":[64],"represent":[66],"the":[67,70,73,95,163,174],"interactions":[68],"between":[69],"operating":[74],"system.":[75],"Recent":[76],"advances":[77],"deep":[79,114],"learning":[80,115],"have":[81],"shown":[82],"promise":[83],"improving":[85],"detection":[87,127],"accuracy":[88,172],"using":[89],"API":[90,130],"call":[91,131],"sequence":[92],"data.":[93],"However,":[94],"potential":[96],"Generative":[98],"Adversarial":[99],"Networks":[100],"(GANs)":[101],"this":[103],"purpose":[104],"largely":[106],"unexplored.":[107],"paper":[109],"proposes":[110],"novel":[112],"hybrid":[113,168],"model":[116,142],"combining":[117],"Gated":[118,154],"Recurrent":[119,155],"Units":[120],"(GRUs)":[121],"GANs":[123],"enhance":[125],"based":[128],"sequences":[132],"from":[133],"portable":[135],"executable":[136],"files.":[137],"We":[138],"evaluate":[139],"our":[140,167],"GRU\u2013GAN":[141],"against":[143],"other":[144],"approaches":[145],"Bidirectional":[147,153],"Long":[148],"Short-Term":[149],"Memory":[150],"(BiLSTM)":[151],"Unit":[156],"(BiGRU)":[157],"multiple":[159],"datasets.":[160],"Results":[161],"demonstrated":[162],"superior":[164],"performance":[165],"model,":[169],"achieving":[170],"98.9%":[171],"most":[175],"challenging":[176],"dataset.":[177],"It":[178],"outperformed":[179],"existing":[180],"models":[181],"resource":[183],"utilization,":[184],"faster":[186],"training":[187],"testing":[189],"times":[190],"low":[192],"memory":[193],"usage.":[194]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":14}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2024-10-15T00:00:00"}