{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T23:20:24Z","timestamp":1777936824468,"version":"3.51.4"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031965586","type":"print"},{"value":"9783031965593","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-96559-3_31","type":"book-chapter","created":{"date-parts":[[2025,6,29]],"date-time":"2025-06-29T07:13:56Z","timestamp":1751181236000},"page":"469-483","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Case-Based Reasoning with\u00a0Diffusion Model for\u00a0Ransomware Detection"],"prefix":"10.1007","author":[{"given":"Haofan","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jarrod","family":"Hardy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Farah","family":"Kandah","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,23]]},"reference":[{"key":"31_CR1","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1016\/S1353-4858(16)30086-1","volume":"2016","author":"R Brewer","year":"2016","unstructured":"Brewer, R.: Ransomware attacks: detection, prevention and cure. Netw. Secur. 2016, 5\u20139 (2016)","journal-title":"Netw. Secur."},{"key":"31_CR2","unstructured":"Varonis: Ransomware Statistics. (n.d.). https:\/\/www.varonis.com\/blog\/ransomware-statistics"},{"key":"31_CR3","unstructured":"TRM Labs: Ransomware in 2024: Latest Trends, Mounting Threats, and the Government Response (2024). https:\/\/www.trmlabs.com\/post\/ransomware-in-2024-latest-trends-mounting-threats-and-the-government-response"},{"key":"31_CR4","unstructured":"Cyberint: Ransomware Annual Report 2024 (2024). https:\/\/cyberint.com\/blog\/research\/ransomware-annual-report-2024\/"},{"issue":"12","key":"31_CR5","doi-asserted-by":"publisher","first-page":"1334","DOI":"10.1109\/PROC.1983.12775","volume":"71","author":"JD Day","year":"1983","unstructured":"Day, J.D., Zimmermann, H.: The OSI reference model. Proc. IEEE 71(12), 1334\u20131340 (1983)","journal-title":"Proc. IEEE"},{"key":"31_CR6","doi-asserted-by":"publisher","unstructured":"Farrukh, Y.A., Khan, I., Wali, S., Bierbrauer, D., Pavlik, J.A., Bastian, N.D.: Payload-byte: a tool for extracting and labeling packet capture files of modern network intrusion detection datasets. In: 2022 IEEE\/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT), pp. 58\u201367 (2022). https:\/\/doi.org\/10.1109\/BDCAT56447.2022.00015.","DOI":"10.1109\/BDCAT56447.2022.00015."},{"issue":"2","key":"31_CR7","first-page":"7","volume":"7","author":"T Kumar","year":"2010","unstructured":"Kumar, T., Verma, K.: A theory based on conversion of RGB image to gray image. Inter. J. Compute. Appli. 7(2), 7\u201310 (2010)","journal-title":"Inter. J. Compute. Appli."},{"key":"31_CR8","doi-asserted-by":"crossref","unstructured":"Liu, Z., et al.: Swin transformer: hierarchical vision transformer using shifted windows. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 10012\u201310022 (2021)","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"31_CR9","doi-asserted-by":"crossref","unstructured":"Lumazine, A., et al.: Ransomware detection in network traffic using a hybrid cnn and isolation forest approach. Sage Publishing, Thousand Oaks, CA, USA (2024)","DOI":"10.22541\/au.172901014.44599790\/v1"},{"key":"31_CR10","doi-asserted-by":"crossref","unstructured":"Wang, W., Zhu, M., Zeng, X., Ye, X., Sheng, Y.: Malware traffic classification using convolutional neural network for representation learning. In: 2017 International Conference on Information Networking (ICOIN), pp. 712\u2013717 (2017)","DOI":"10.1109\/ICOIN.2017.7899588"},{"key":"31_CR11","doi-asserted-by":"crossref","unstructured":"Kiyol, S., Franchini, D., Moreno, E., Kowalski, R., Fernandez, W., Milosevic, A.: Ransomware detection using LSTM networks and file entropy analysis: a sequence-based approach (2024)","DOI":"10.22541\/au.172841694.49477944\/v1"},{"key":"31_CR12","doi-asserted-by":"publisher","first-page":"68785","DOI":"10.1109\/ACCESS.2024.3397921","volume":"12","author":"J Ispahany","year":"2024","unstructured":"Ispahany, J., Islam, M.R., Islam, M.Z., Khan, M.A.: Ransomware detection using machine learning: a review, research limitations and future directions. IEEE Access 12, 68785\u201368813 (2024). https:\/\/doi.org\/10.1109\/ACCESS.2024.3397921","journal-title":"IEEE Access"},{"key":"31_CR13","doi-asserted-by":"publisher","DOI":"10.1016\/j.energy.2021.120682","volume":"229","author":"H Zang","year":"2021","unstructured":"Zang, H., et al.: Residential load forecasting based on LSTM fusing self-attention mechanism with pooling. Energy 229, 120682 (2021)","journal-title":"Energy"},{"key":"31_CR14","unstructured":"University of Victoria ISOT: Botnet and Ransomware Detection Datasets. November 27, (2022). https:\/\/onlineacademiccommunity.uvic.ca\/isot\/2022\/11\/27\/botnet-and-ransomware-detection-datasets\/"},{"key":"31_CR15","doi-asserted-by":"crossref","unstructured":"Alzonem, F., Albrecht, G., Castellanos, D., Vandermeer, M., Stansfield, B.: Ransomware Detection Using Convolutional Neural Networks and Isolation Forests in Network Traffic Patterns (2024)","DOI":"10.21203\/rs.3.rs-5278706\/v1"},{"key":"31_CR16","doi-asserted-by":"crossref","unstructured":"Li, G., Wang, S., Chen, Y., Zhou, J., Zhao, Q.: A Hybrid Framework for Ransomware Detection Using Deep Learning and Monte Carlo Tree Search (2024)","DOI":"10.31219\/osf.io\/cjyvb"},{"issue":"1","key":"31_CR17","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3639037","volume":"8","author":"X Jiang","year":"2024","unstructured":"Jiang, X., et al.: Netdiffusion: network data augmentation through protocol-constrained traffic generation. Proc. ACM Measurem. Anal. Comput. Syst. 8(1), 1\u201332 (2024)","journal-title":"Proc. ACM Measurem. Anal. Comput. Syst."},{"key":"31_CR18","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102166","volume":"103","author":"AS Bozkir","year":"2021","unstructured":"Bozkir, A.S., Tahillioglu, E., Aydos, M., Kara, I.: Catch them alive: a malware detection approach through memory forensics, manifold learning and computer vision. Comput. Sec. 103, 102166 (2021)","journal-title":"Comput. Sec."},{"issue":"1","key":"31_CR19","doi-asserted-by":"publisher","first-page":"165","DOI":"10.2298\/CSIS200424038K","volume":"19","author":"K Kim","year":"2022","unstructured":"Kim, K., Lee, J.-H., Lim, H.-K., Oh, S.W., Han, Y.-H.: Deep RNN-based network traffic classification scheme in edge computing system. Comput. Sci. Inf. Syst. 19(1), 165\u2013184 (2022)","journal-title":"Comput. Sci. Inf. Syst."},{"key":"31_CR20","doi-asserted-by":"crossref","unstructured":"Cao, H., et al.: A survey on generative diffusion models. IEEE Trans. Knowl. Data Eng. (2024)","DOI":"10.1109\/TKDE.2024.3361474"},{"key":"31_CR21","doi-asserted-by":"publisher","first-page":"328","DOI":"10.1016\/j.compeleceng.2015.08.005","volume":"46","author":"V Chernov","year":"2015","unstructured":"Chernov, V., Alander, J., Bochko, V.: Integer-based accurate conversion between RGB and HSV color spaces. Comput. Electr. Eng. 46, 328\u2013337 (2015)","journal-title":"Comput. Electr. Eng."},{"issue":"20","key":"31_CR22","doi-asserted-by":"publisher","first-page":"6507","DOI":"10.3390\/s24206507","volume":"24","author":"M Liu","year":"2024","unstructured":"Liu, M., Yang, Q., Wang, W., Liu, S.: Semi-supervised encrypted malicious traffic detection based on multimodal traffic characteristics. Sensors 24(20), 6507 (2024)","journal-title":"Sensors"},{"key":"31_CR23","unstructured":"Liu, J., et al.: A survey on diffusion models for anomaly detection. arXiv preprintarXiv:2501.11430 (2025)"},{"key":"31_CR24","doi-asserted-by":"crossref","unstructured":"Alamro, M., Aljameel, S., Hamza, M.A., Othman, A.Y.: Automated Android Malware Detection Using Optimal Ensemble Learning Approach for Cybersecurity (2023)","DOI":"10.1109\/ACCESS.2023.3294263"},{"key":"31_CR25","doi-asserted-by":"crossref","unstructured":"Stastne, J., Laurent, K., Fitzgerald, G.: Dynamic Signal-Based Ransomware Detection with Temporal-Pattern Profiling Technique (2024)","DOI":"10.22541\/au.173083395.56558646\/v1"},{"key":"31_CR26","unstructured":"CNN: CDK Hack: Ransom Demands Twenty-Five Million Dollars (2024). https:\/\/www.cnn.com\/2024\/07\/11\/business\/cdk-hack-ransom-tweny-five-million-dollars\/index.html"},{"key":"31_CR27","doi-asserted-by":"crossref","unstructured":"Feng, P., et al.: DawnGNN: documentation augmented windows malware detection using graph neural network. Comput. Sec. 103788 (2024)","DOI":"10.1016\/j.cose.2024.103788"},{"issue":"8","key":"31_CR28","doi-asserted-by":"publisher","first-page":"5167","DOI":"10.3390\/app13085167","volume":"13","author":"H Khalid Alkahtani","year":"2023","unstructured":"Khalid Alkahtani, H., et al.: Optimal graph convolutional neural network-based ransomware detection for cybersecurity in IoT environment. Appli. Sci. 13(8), 5167 (2023)","journal-title":"Appli. Sci."},{"key":"31_CR29","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.107064","volume":"184","author":"S Cai","year":"2025","unstructured":"Cai, S., et al.: DDP-DAR: Network intrusion detection based on denoising diffusion probabilistic model and dual-attention residual network\u2019. Neural Netw. 184, 107064 (2025)","journal-title":"Neural Netw."},{"key":"31_CR30","doi-asserted-by":"publisher","unstructured":"Ronneberger, O., Fischer, P., Brox, T.: U-Net: convolutional networks for biomedical image segmentation. In: Navab, N., Hornegger, J., Wells, W.M., Frangi, A.F. (eds.) MICCAI 2015. LNCS, vol. 9351, pp. 234\u2013241. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-24574-4_28","DOI":"10.1007\/978-3-319-24574-4_28"}],"container-title":["Lecture Notes in Computer Science","Case-Based Reasoning Research and Development"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-96559-3_31","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T03:44:31Z","timestamp":1777693471000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-96559-3_31"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031965586","9783031965593"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-96559-3_31","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"23 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCBR","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Case-Based Reasoning","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Biarritz","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 June 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"33","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccbr2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}