{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,4]],"date-time":"2025-12-04T09:59:36Z","timestamp":1764842376299},"publisher-location":"Cham","reference-count":21,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030453701"},{"type":"electronic","value":"9783030453718"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-45371-8_6","type":"book-chapter","created":{"date-parts":[[2020,4,16]],"date-time":"2020-04-16T23:04:51Z","timestamp":1587078291000},"page":"82-97","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Interpreting Machine Learning Malware Detectors Which Leverage N-gram Analysis"],"prefix":"10.1007","author":[{"given":"William","family":"Briguglio","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sherif","family":"Saad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,4,17]]},"reference":[{"key":"6_CR1","unstructured":"Alber, M., et al.: Innvestigate neural networks! (2018)"},{"key":"6_CR2","unstructured":"Apley, D.W., Zhu, J.: Visualizing the effects of predictor variables in black box supervised learning models (2016)"},{"key":"6_CR3","doi-asserted-by":"crossref","unstructured":"Bach, S., et al.: On pixel-wise explanations for non-linear classifier decisions by layer-wise relevance propagation. PLoS ONE (2015)","DOI":"10.1371\/journal.pone.0130140"},{"issue":"1","key":"6_CR4","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman, L.: Random forests. Mach. Learn. 45(1), 5\u201332 (2001). \nhttps:\/\/doi.org\/10.1023\/A:1010933404324","journal-title":"Mach. Learn."},{"issue":"1","key":"6_CR5","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1080\/00401706.1977.10489493","volume":"19","author":"RD Cook","year":"1977","unstructured":"Cook, R.D.: Detection of influential observation in linear regression. Technometrics 19(1), 15\u201318 (1977). \nhttps:\/\/doi.org\/10.1080\/00401706.1977.10489493","journal-title":"Technometrics"},{"issue":"5","key":"6_CR6","doi-asserted-by":"publisher","first-page":"1189","DOI":"10.1214\/aos\/1013203451","volume":"29","author":"JH Friedman","year":"2001","unstructured":"Friedman, J.H.: Greedy function approximation: a gradient boosting machine. Ann. Stat. 29(5), 1189\u20131232 (2001). \nhttps:\/\/doi.org\/10.1214\/aos\/1013203451","journal-title":"Ann. Stat."},{"issue":"3","key":"6_CR7","doi-asserted-by":"publisher","first-page":"916","DOI":"10.1214\/07-AOAS148","volume":"2","author":"JH Friedman","year":"2008","unstructured":"Friedman, J.H., Popescu, B.E.: Predictive learning via rule ensembles. Ann. Appl. Stat. 2(3), 916\u2013954 (2008). \nhttps:\/\/doi.org\/10.1214\/07-AOAS148","journal-title":"Ann. Appl. Stat."},{"key":"6_CR8","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1080\/10618600.2014.907095","volume":"24","author":"A Goldstein","year":"2013","unstructured":"Goldstein, A., Kapelner, A., Bleich, J., Pitkin, E.: Peeking inside the black box: visualizing statistical learning with plots of individual conditional expectation. J. Comput. Graph. Stat. 24, 44\u201365 (2013). \nhttps:\/\/doi.org\/10.1080\/10618600.2014.907095","journal-title":"J. Comput. Graph. Stat."},{"key":"6_CR9","unstructured":"Kim, B., Khanna, R., Koyejo, O.: Examples are not enough, learn to criticize! criticism for interpretability. In: Proceedings of the 30th International Conference on Neural Information Processing Systems, NIPS 2016, pp. 2288\u20132296. Curran Associates Inc., USA (2016). \nhttp:\/\/dl.acm.org\/citation.cfm?id=3157096.3157352"},{"key":"6_CR10","unstructured":"Koh, P.W., Liang, P.: Understanding black-box predictions via influence functions. In: Proceedings of the 34th International Conference on Machine Learning, ICML 2017, vol. 70, pp. 1885\u20131894. JMLR.org (2017). \nhttp:\/\/dl.acm.org\/citation.cfm?id=3305381.3305576"},{"key":"6_CR11","unstructured":"Molnar, C.: Interpretable Machine Learning. GitHub (2019). \nhttps:\/\/christophm.github.io\/interpretable-ml-book\/"},{"key":"6_CR12","doi-asserted-by":"publisher","unstructured":"Otero, F.E., Freitas, A.A.: Improving the interpretability of classification rules discovered by an ant colony algorithm. In: Proceedings of the 15th Annual Conference on Genetic and Evolutionary Computation, GECCO 2013, pp. 73\u201380. ACM, New York (2013). \nhttps:\/\/doi.org\/10.1145\/2463372.2463382","DOI":"10.1145\/2463372.2463382"},{"key":"6_CR13","unstructured":"Peltola, T.: Local interpretable model-agnostic explanations of Bayesian predictive models via Kullback-Leibler projections. \narXiv:1810.02678\n\n (2018)"},{"issue":"1","key":"6_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s11416-016-0283-1","volume":"14","author":"E Raff","year":"2016","unstructured":"Raff, E., et al.: An investigation of byte n-gram features for malware classification. J. Comput. Virol. Hacking Tech. 14(1), 1\u201320 (2016). \nhttps:\/\/doi.org\/10.1007\/s11416-016-0283-1","journal-title":"J. Comput. Virol. Hacking Tech."},{"key":"6_CR15","doi-asserted-by":"publisher","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: \u201cWhy should i trust you?\u201d: explaining the predictions of any classifier. In: Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD 2016, pp. 1135\u20131144. ACM, New York (2016). \nhttps:\/\/doi.org\/10.1145\/2939672.2939778","DOI":"10.1145\/2939672.2939778"},{"key":"6_CR16","unstructured":"Ronen, R., Radu, M., Feuerstein, C., Yom-Tov, E., Ahmadi, M.: Microsoft malware classification challenge (2018)"},{"key":"6_CR17","unstructured":"Saabas, A.: Treeinterpreter (2015). \nhttps:\/\/github.com\/andosa\/treeinterpreter"},{"key":"6_CR18","doi-asserted-by":"publisher","unstructured":"Shirataki, S., Yamaguchi, S.: A study on interpretability of decision of machine learning. In: 2017 IEEE International Conference on Big Data (Big Data), pp. 4830\u20134831, December 2017. \nhttps:\/\/doi.org\/10.1109\/BigData.2017.8258557","DOI":"10.1109\/BigData.2017.8258557"},{"key":"6_CR19","unstructured":"Shrikumar, A., Greenside, P., Kundaje, A.: Learning important features through propagating activation differences. \narXiv:1704.02685\n\n (2017)"},{"key":"6_CR20","first-page":"1","volume":"11","author":"E Strumbelj","year":"2010","unstructured":"Strumbelj, E., Kononenko, I.: An efficient explanation of individual classifications using game theory. J. Mach. Learn. Res. 11, 1\u201318 (2010). \nhttp:\/\/dl.acm.org\/citation.cfm?id=1756006.1756007","journal-title":"J. Mach. Learn. Res."},{"key":"6_CR21","doi-asserted-by":"crossref","unstructured":"Wachter, S., Mittelstadt, B.D., Russell, C.: Counterfactual explanations without opening the black box: automated decisions and the GDPR. \narXiv:1711.00399\n\n (2017)","DOI":"10.2139\/ssrn.3063289"}],"container-title":["Lecture Notes in Computer Science","Foundations and Practice of Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-45371-8_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,4,16]],"date-time":"2020-04-16T23:11:38Z","timestamp":1587078698000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-45371-8_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030453701","9783030453718"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-45371-8_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"17 April 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"FPS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Foundations and Practice of Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 November 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 November 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"fps2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/fps2019.sciencesconf.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"50","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"38% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}