{"id":"https://openalex.org/W2632775315","doi":"https://doi.org/10.1109/icassp.2017.7952603","title":"Malware classification with LSTM and GRU language models and a character-level CNN","display_name":"Malware classification with LSTM and GRU language models and a character-level CNN","publication_year":2017,"publication_date":"2017-03-01","ids":{"openalex":"https://openalex.org/W2632775315","doi":"https://doi.org/10.1109/icassp.2017.7952603","mag":"2632775315"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp.2017.7952603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013502032","display_name":"Ben Athiwaratkun","orcid":"https://orcid.org/0000-0002-2009-496X"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ben Athiwaratkun","raw_affiliation_strings":["Department of Statistical Science, Cornell University, Ithaca, NY"],"affiliations":[{"raw_affiliation_string":"Department of Statistical Science, Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059859993","display_name":"Jack W. Stokes","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jack W. Stokes","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":13.815,"has_fulltext":true,"fulltext_origin":"ngrams","cited_by_count":223,"citation_normalized_percentile":{"value":0.999594,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2482","last_page":"2486"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12611","display_name":"Neural Networks and Reservoir Computing","score":0.9979,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9942,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.67239326},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature Engineering","score":0.53531265},{"id":"https://openalex.org/keywords/word-error-rate","display_name":"Word error rate","score":0.44470042}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8667302},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.77352977},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.72440654},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.67239326},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.58617544},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.5486964},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.54187125},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.53531265},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.5338458},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4608727},{"id":"https://openalex.org/C203005215","wikidata":"https://www.wikidata.org/wiki/Q79798","display_name":"Machine translation","level":2,"score":0.44594586},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.44470042},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.44076356},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.41996062},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.38478458},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp.2017.7952603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":22,"referenced_works":["https://openalex.org/W1487207002","https://openalex.org/W1545528966","https://openalex.org/W1665214252","https://openalex.org/W179875071","https://openalex.org/W1884606608","https://openalex.org/W1893133781","https://openalex.org/W1924770834","https://openalex.org/W1966948031","https://openalex.org/W200681053","https://openalex.org/W2064675550","https://openalex.org/W2108563286","https://openalex.org/W2118706537","https://openalex.org/W2121749752","https://openalex.org/W2131774270","https://openalex.org/W2133564696","https://openalex.org/W2144112223","https://openalex.org/W2170240176","https://openalex.org/W2331896832","https://openalex.org/W2476429474","https://openalex.org/W2963012544","https://openalex.org/W2964199361","https://openalex.org/W2964308564"],"related_works":["https://openalex.org/W4387022695","https://openalex.org/W4221142855","https://openalex.org/W3214491504","https://openalex.org/W2594897229","https://openalex.org/W2495256954","https://openalex.org/W2259317772","https://openalex.org/W2160451571","https://openalex.org/W2151348424","https://openalex.org/W2050138804","https://openalex.org/W1566315437"],"abstract_inverted_index":{"Malicious":[0],"software,":[1],"or":[2,69],"malware,":[3],"continues":[4],"to":[5,38,47,110,119,130,176],"be":[6],"a":[7,25,32,48,63,87,95,141,148,167,183],"problem":[8],"for":[9],"computer":[10],"users,":[11],"corporations,":[12],"and":[13,94,163],"governments.":[14],"Previous":[15],"research":[16],"[1]":[17,181],"has":[18],"explored":[19],"training":[20],"file-based,":[21],"malware":[22,33,51,82,144],"classifiers":[23],"using":[24,105],"two-stage":[26],"approach.":[27],"In":[28,53,75],"the":[29,40,58,113,132,157,171,177],"first":[30],"stage,":[31],"language":[34,59,92,100],"model":[35,60,93],"is":[36,44,61],"used":[37,123],"learn":[39],"feature":[41],"representation":[42,134],"which":[43,85],"then":[45],"input":[46],"second":[49],"stage":[50],"classifier.":[52],"Pascanu":[54],"et":[55],"al.":[56],"[1],":[57,125],"either":[62],"standard":[64],"recurrent":[65,97],"neural":[66,136,151],"network":[67,73,152],"(RNN)":[68],"an":[70,106,127],"echo":[71],"state":[72],"(ESN).":[74],"this":[76],"work,":[77],"we":[78,139],"propose":[79,104,140],"several":[80],"new":[81,142],"classification":[83],"architectures":[84],"include":[86],"long":[88],"short-term":[89],"memory":[90],"(LSTM)":[91],"gated":[96],"unit":[98],"(GRU)":[99],"model.":[101],"We":[102],"also":[103],"attention":[107],"mechanism":[108],"similar":[109],"[12]":[111],"from":[112,135],"machine":[114],"translation":[115],"literature,":[116],"in":[117,124,170,180],"addition":[118],"temporal":[120,160],"max":[121,161],"pooling":[122,162],"as":[126],"alternative":[128],"way":[129],"construct":[131],"file":[133],"features.":[137],"Finally,":[138],"single-stage":[143],"classifier":[145],"based":[146],"on":[147],"character-level":[149],"convolutional":[150],"(CNN).":[153],"Results":[154],"show":[155],"that":[156],"LSTM":[158],"with":[159],"logistic":[164],"regression":[165],"offers":[166],"31.3%":[168],"improvement":[169],"true":[172],"positive":[173,185],"rate":[174,186],"compared":[175],"best":[178],"system":[179],"at":[182],"false":[184],"of":[187],"1%.":[188]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2632775315","counts_by_year":[{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":25},{"year":2022,"cited_by_count":43},{"year":2021,"cited_by_count":46},{"year":2020,"cited_by_count":35},{"year":2019,"cited_by_count":38},{"year":2018,"cited_by_count":16},{"year":2017,"cited_by_count":4}],"updated_date":"2025-01-15T20:41:59.717980","created_date":"2017-06-30"}