{"id":"https://openalex.org/W4400043036","doi":"https://doi.org/10.3390/s24134122","title":"Malware Detection for Internet of Things Using One-Class Classification","display_name":"Malware Detection for Internet of Things Using One-Class Classification","publication_year":2024,"publication_date":"2024-06-25","ids":{"openalex":"https://openalex.org/W4400043036","doi":"https://doi.org/10.3390/s24134122","pmid":"https://pubmed.ncbi.nlm.nih.gov/39000901"},"language":"en","primary_location":{"id":"doi:10.3390/s24134122","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s24134122","pdf_url":"https://www.mdpi.com/1424-8220/24/13/4122/pdf?version=1719311315","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/24/13/4122/pdf?version=1719311315","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042154109","display_name":"Tongxin Shi","orcid":"https://orcid.org/0000-0003-0503-2207"},"institutions":[{"id":"https://openalex.org/I57328836","display_name":"North Dakota State University","ror":"https://ror.org/05h1bnb22","country_code":"US","type":"education","lineage":["https://openalex.org/I57328836"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tongxin Shi","raw_affiliation_strings":["Department of Computer Science, North Dakota State University, Fargo, ND 58102, USA"],"raw_orcid":"https://orcid.org/0000-0003-0503-2207","affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Dakota State University, Fargo, ND 58102, USA","institution_ids":["https://openalex.org/I57328836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058275921","display_name":"Roy McCann","orcid":"https://orcid.org/0000-0001-6480-0099"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Roy A. McCann","raw_affiliation_strings":["Department of Electrical Engineering, University of Arkansas, Fayetteville, AR 72701, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, University of Arkansas, Fayetteville, AR 72701, USA","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101531539","display_name":"Ying Huang","orcid":"https://orcid.org/0000-0002-5886-670X"},"institutions":[{"id":"https://openalex.org/I57328836","display_name":"North Dakota State University","ror":"https://ror.org/05h1bnb22","country_code":"US","type":"education","lineage":["https://openalex.org/I57328836"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ying Huang","raw_affiliation_strings":["Department of Civil, Construction and Environmental Engineering, North Dakota State University, Fargo, ND 58102, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Civil, Construction and Environmental Engineering, North Dakota State University, Fargo, ND 58102, USA","institution_ids":["https://openalex.org/I57328836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100331950","display_name":"Wei Min Wang","orcid":"https://orcid.org/0000-0002-5422-171X"},"institutions":[{"id":"https://openalex.org/I57328836","display_name":"North Dakota State University","ror":"https://ror.org/05h1bnb22","country_code":"US","type":"education","lineage":["https://openalex.org/I57328836"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Department of Computer Science, North Dakota State University, Fargo, ND 58102, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Dakota State University, Fargo, ND 58102, USA","institution_ids":["https://openalex.org/I57328836"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101539161","display_name":"Jun Kong","orcid":"https://orcid.org/0000-0003-4916-8499"},"institutions":[{"id":"https://openalex.org/I57328836","display_name":"North Dakota State University","ror":"https://ror.org/05h1bnb22","country_code":"US","type":"education","lineage":["https://openalex.org/I57328836"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Jun Kong","raw_affiliation_strings":["Department of Computer Science, North Dakota State University, Fargo, ND 58102, USA"],"raw_orcid":"https://orcid.org/0000-0003-4916-8499","affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Dakota State University, Fargo, ND 58102, USA","institution_ids":["https://openalex.org/I57328836"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5101539161"],"corresponding_institution_ids":["https://openalex.org/I57328836"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2598},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2598},"fwci":4.2232,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.95061455,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"24","issue":"13","first_page":"4122","last_page":"4122"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.83050137758255},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7877185344696045},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.7571015357971191},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7103807330131531},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.6360701322555542},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6286559104919434},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6036103367805481},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.5536761283874512},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5110636949539185},{"id":"https://openalex.org/keywords/one-class-classification","display_name":"One-class classification","score":0.4923933744430542},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47812309861183167},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.41534459590911865},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.37126240134239197},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3363943099975586},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3236144781112671},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.26709628105163574},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.24961227178573608},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.08861958980560303}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.83050137758255},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7877185344696045},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.7571015357971191},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7103807330131531},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.6360701322555542},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6286559104919434},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6036103367805481},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5536761283874512},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5110636949539185},{"id":"https://openalex.org/C34872919","wikidata":"https://www.wikidata.org/wiki/Q7092302","display_name":"One-class classification","level":3,"score":0.4923933744430542},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47812309861183167},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.41534459590911865},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.37126240134239197},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3363943099975586},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3236144781112671},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26709628105163574},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.24961227178573608},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.08861958980560303},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/s24134122","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s24134122","pdf_url":"https://www.mdpi.com/1424-8220/24/13/4122/pdf?version=1719311315","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:39000901","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/39000901","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:pubmedcentral.nih.gov:11243998","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/11243998","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC11243998/pdf/sensors-24-04122.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:0a4a4202d04247da94ff0b265fcc6ebf","is_oa":false,"landing_page_url":"https://doaj.org/article/0a4a4202d04247da94ff0b265fcc6ebf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 24, Iss 13, p 4122 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/s24134122","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s24134122","pdf_url":"https://www.mdpi.com/1424-8220/24/13/4122/pdf?version=1719311315","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3308154314","display_name":"RII Track-2 FEC: Artificial Intelligence on Sustainable Energy Infrastructure Network (AI SUSTEIN)  and Beyond towards Industries of the Future","funder_award_id":"2119691","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8732376063","display_name":null,"funder_award_id":"OIA-2119691","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4400043036.pdf"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W2612186685","https://openalex.org/W2766123777","https://openalex.org/W2796394805","https://openalex.org/W2913811025","https://openalex.org/W2914649569","https://openalex.org/W2931858311","https://openalex.org/W2932977083","https://openalex.org/W2968774960","https://openalex.org/W2993550441","https://openalex.org/W3027374119","https://openalex.org/W3036491774","https://openalex.org/W3127433831","https://openalex.org/W3169330763","https://openalex.org/W4285189699","https://openalex.org/W4312619065","https://openalex.org/W4317207812","https://openalex.org/W6839058915"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W2184748140","https://openalex.org/W2110675786","https://openalex.org/W3120717340","https://openalex.org/W2567044960","https://openalex.org/W2052466667","https://openalex.org/W1679070068","https://openalex.org/W2519215548"],"abstract_inverted_index":{"The":[0],"increasing":[1],"usage":[2],"of":[3,9,42,47,66,105,157],"interconnected":[4],"devices":[5],"within":[6],"the":[7,40,71,103,155,164,169],"Internet":[8],"Things":[10],"(IoT)":[11],"and":[12,20,25,59,85,114,123,143,179],"Industrial":[13],"IoT":[14,35,170,176],"(IIoT)":[15],"has":[16],"significantly":[17],"enhanced":[18],"efficiency":[19],"utility":[21],"in":[22,168,185],"both":[23,121],"personal":[24],"industrial":[26],"settings":[27],"but":[28],"also":[29],"heightened":[30],"cybersecurity":[31],"vulnerabilities,":[32],"particularly":[33],"through":[34],"malware.":[36],"This":[37],"paper":[38],"explores":[39],"use":[41],"one-class":[43,108,150,161],"classification,":[44,162],"a":[45,64],"method":[46,73],"unsupervised":[48,158],"learning,":[49,159],"which":[50,62,89],"is":[51,63,90],"especially":[52,160],"suitable":[53],"for":[54,74,92,182],"unlabeled":[55],"data,":[56],"dynamic":[57],"environments,":[58],"malware":[60,166],"detection,":[61],"form":[65],"anomaly":[67],"detection.":[68],"We":[69,134],"introduce":[70],"TF-IDF":[72],"transforming":[75],"nominal":[76],"features":[77],"into":[78,174],"numerical":[79],"formats":[80],"that":[81,117],"avoid":[82],"information":[83],"loss":[84],"manage":[86],"dimensionality":[87],"effectively,":[88],"crucial":[91],"enhancing":[93,175],"pattern":[94],"recognition":[95],"when":[96],"combined":[97],"with":[98,120,138],"n-grams.":[99],"Furthermore,":[100],"we":[101],"compare":[102],"performance":[104],"multi-class":[106],"vs.":[107,127],"classification":[109],"models,":[110],"including":[111],"Isolation":[112],"Forest":[113],"deep":[115],"autoencoder,":[116],"are":[118],"trained":[119,128],"benign":[122,131],"malicious":[124],"NetFlow":[125,132],"samples":[126],"exclusively":[129],"on":[130],"samples.":[133],"achieve":[135],"100%":[136],"recall":[137],"precision":[139],"rates":[140],"above":[141],"80%":[142],"90%":[144],"across":[145],"various":[146],"test":[147],"datasets":[148],"using":[149],"classification.":[151],"These":[152],"models":[153],"show":[154],"adaptability":[156],"to":[163],"evolving":[165],"threats":[167],"domain,":[171],"offering":[172],"insights":[173],"security":[177],"frameworks":[178],"suggesting":[180],"directions":[181],"future":[183],"research":[184],"this":[186],"critical":[187],"area.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}