{"id":"https://openalex.org/W3026804104","doi":"https://doi.org/10.3390/s20102893","title":"Attention-Based Automated Feature Extraction for Malware Analysis","display_name":"Attention-Based Automated Feature Extraction for Malware Analysis","publication_year":2020,"publication_date":"2020-05-20","ids":{"openalex":"https://openalex.org/W3026804104","doi":"https://doi.org/10.3390/s20102893","mag":"3026804104","pmid":"https://pubmed.ncbi.nlm.nih.gov/32443750"},"language":"en","primary_location":{"id":"doi:10.3390/s20102893","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s20102893","pdf_url":"https://www.mdpi.com/1424-8220/20/10/2893/pdf","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/20/10/2893/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078113531","display_name":"Sunoh Choi","orcid":"https://orcid.org/0000-0002-0654-7109"},"institutions":[{"id":"https://openalex.org/I195373058","display_name":"Honam University","ror":"https://ror.org/04vj5r404","country_code":"KR","type":"education","lineage":["https://openalex.org/I195373058"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Sunoh Choi","raw_affiliation_strings":["Department of Computer Engineering, Honam University, Gwangju 62399, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Honam University, Gwangju 62399, Korea","institution_ids":["https://openalex.org/I195373058"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071107445","display_name":"Jangseong Bae","orcid":"https://orcid.org/0000-0002-0362-8771"},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jangseong Bae","raw_affiliation_strings":["Department of Computer Science and Engineering, Kangwon University, Kangwon-do 24341, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Kangwon University, Kangwon-do 24341, Korea","institution_ids":["https://openalex.org/I165507594"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073790847","display_name":"Changki Lee","orcid":"https://orcid.org/0000-0001-8373-1500"},"institutions":[{"id":"https://openalex.org/I165507594","display_name":"Kangwon National University","ror":"https://ror.org/01mh5ph17","country_code":"KR","type":"education","lineage":["https://openalex.org/I165507594"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Changki Lee","raw_affiliation_strings":["Department of Computer Science and Engineering, Kangwon University, Kangwon-do 24341, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Kangwon University, Kangwon-do 24341, Korea","institution_ids":["https://openalex.org/I165507594"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100395864","display_name":"Youngsoo Kim","orcid":"https://orcid.org/0000-0002-1494-9503"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Youngsoo Kim","raw_affiliation_strings":["Information Security Division, Electronics and Telecommunications Research Institute, Daejeon 34129, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Division, Electronics and Telecommunications Research Institute, Daejeon 34129, Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016013197","display_name":"Jonghyun Kim","orcid":"https://orcid.org/0000-0002-5532-2117"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jonghyun Kim","raw_affiliation_strings":["Information Security Division, Electronics and Telecommunications Research Institute, Daejeon 34129, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Division, Electronics and Telecommunications Research Institute, Daejeon 34129, Korea","institution_ids":["https://openalex.org/I142401562"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5078113531"],"corresponding_institution_ids":["https://openalex.org/I195373058"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2598},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2598},"fwci":3.3428,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":{"value":0.93090387,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"20","issue":"10","first_page":"2893","last_page":"2893"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8012732267379761},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7930729389190674},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5794447660446167},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4588523507118225},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4574240446090698},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.44159775972366333},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37716737389564514},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33646178245544434},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.22933492064476013},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20284876227378845}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8012732267379761},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7930729389190674},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5794447660446167},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4588523507118225},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4574240446090698},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.44159775972366333},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37716737389564514},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33646178245544434},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.22933492064476013},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20284876227378845}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/s20102893","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s20102893","pdf_url":"https://www.mdpi.com/1424-8220/20/10/2893/pdf","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:32443750","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/32443750","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:doaj.org/article:1dfeb0247ecc4ae2af8be86a611a9ae5","is_oa":true,"landing_page_url":"https://doaj.org/article/1dfeb0247ecc4ae2af8be86a611a9ae5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 20, Iss 10, p 2893 (2020)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1424-8220/20/10/2893/","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3390/s20102893","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:7284474","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/7284474","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/s20102893","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s20102893","pdf_url":"https://www.mdpi.com/1424-8220/20/10/2893/pdf","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7400000095367432,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2535265761","display_name":null,"funder_award_id":"2019R1G1A11100261","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"},{"id":"https://openalex.org/G3528774675","display_name":null,"funder_award_id":"2016-0-00078","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"},{"id":"https://openalex.org/G4612455900","display_name":null,"funder_award_id":"2016-0-00078","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"},{"id":"https://openalex.org/G7041911452","display_name":null,"funder_award_id":"2016-0-00078","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3026804104.pdf","grobid_xml":"https://content.openalex.org/works/W3026804104.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1545528966","https://openalex.org/W1573526548","https://openalex.org/W1893133781","https://openalex.org/W1966948031","https://openalex.org/W2099312541","https://openalex.org/W2132874238","https://openalex.org/W2144112223","https://openalex.org/W2165660021","https://openalex.org/W2170770919","https://openalex.org/W2476429474","https://openalex.org/W2525598640","https://openalex.org/W2548971154","https://openalex.org/W2564089970","https://openalex.org/W2788864200","https://openalex.org/W2797678261","https://openalex.org/W2896805421","https://openalex.org/W2904359912","https://openalex.org/W2962965405","https://openalex.org/W2968580482","https://openalex.org/W3100399179","https://openalex.org/W6687483927","https://openalex.org/W6757248742"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W4312814274","https://openalex.org/W1590307681","https://openalex.org/W2536018345","https://openalex.org/W4285370786","https://openalex.org/W2296488620","https://openalex.org/W2358353312","https://openalex.org/W1966145327"],"abstract_inverted_index":{"Every":[0],"day,":[1],"hundreds":[2],"of":[3,5,27],"thousands":[4],"malicious":[6,29,38,51,74],"files":[7,52,65],"are":[8,66,99],"created":[9],"to":[10,62],"exploit":[11],"zero-day":[12],"vulnerabilities.":[13],"Existing":[14],"pattern-based":[15],"antivirus":[16],"solutions":[17],"face":[18],"difficulties":[19],"in":[20],"coping":[21],"with":[22,53],"such":[23],"a":[24,73,107,128],"large":[25],"number":[26],"new":[28],"files.":[30],"To":[31],"solve":[32],"this":[33,69,115],"problem,":[34],"artificial":[35],"intelligence":[36],"(AI)-based":[37],"file":[39,75,108],"detection":[40,131,142],"methods":[41],"have":[42],"been":[43],"proposed.":[44],"However,":[45],"even":[46],"if":[47],"we":[48,71,89,112],"can":[49,90],"detect":[50],"high":[54],"accuracy":[55,119],"using":[56,133],"deep":[57],"learning,":[58],"it":[59],"is":[60,109,121],"difficult":[61],"identify":[63,91],"why":[64],"malicious.":[67,110],"In":[68],"study,":[70],"propose":[72],"feature":[76],"extraction":[77],"method":[78],"based":[79],"on":[80],"attention":[81,87],"mechanism.":[82],"First,":[83],"by":[84],"adapting":[85],"the":[86],"mechanism,":[88],"application":[92],"program":[93],"interface":[94],"(API)":[95],"system":[96],"calls":[97],"that":[98,114,120],"more":[100],"important":[101],"than":[102,127],"others":[103],"for":[104],"determining":[105],"whether":[106],"Second,":[111],"confirm":[113],"approach":[116],"yields":[117],"an":[118],"approximately":[122],"12%":[123],"and":[124,137],"5%":[125],"higher":[126],"conventional":[129],"AI-based":[130],"model":[132],"convolutional":[134],"neural":[135],"networks":[136],"skip-connected":[138],"long":[139],"short-term":[140],"memory-based":[141],"model,":[143],"respectively.":[144]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}