{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:43:20Z","timestamp":1777614200237,"version":"3.51.4"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319261867","type":"print"},{"value":"9783319261874","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-26187-4_12","type":"book-chapter","created":{"date-parts":[[2015,10,26]],"date-time":"2015-10-26T13:05:24Z","timestamp":1445864724000},"page":"164-176","source":"Crossref","is-referenced-by-count":5,"title":["File Relation Graph Based Malware Detection Using Label Propagation"],"prefix":"10.1007","author":[{"given":"Ming","family":"Ni","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qianmu","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hong","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tao","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jun","family":"Hou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,12,18]]},"reference":[{"key":"12_CR1","doi-asserted-by":"crossref","unstructured":"Abou-Assaleh, T., Cercone, N., Keselj, V., Sweidan, R.: N-gram-based detection of new malicious code. In: Proceedings of the 28th Annual International Computer Software and Applications Conference, COMPSAC 2004, vol. 2, pp. 41\u201342. IEEE (2004)","DOI":"10.1109\/CMPSAC.2004.1342667"},{"key":"12_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1007\/978-3-540-74320-0_10","volume-title":"Recent Advances in Intrusion Detection","author":"M Bailey","year":"2007","unstructured":"Bailey, M., Oberheide, J., Andersen, J., Mao, Z.M., Jahanian, F., Nazario, J.: Automated classification and analysis of internet malware. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol. 4637, pp. 178\u2013197. Springer, Heidelberg (2007)"},{"key":"12_CR3","doi-asserted-by":"crossref","unstructured":"Chau, D.H., Nachenberg, C., Wilhelm, J., Wright, A., Faloutsos, C.: Polonium: tera-scale graph mining and inference for malware detection. In: SIAM International Conference on Data Mining, vol. 2 (2011)","DOI":"10.1137\/1.9781611972818.12"},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Chen, l., Li, T., Abdulhayoglu, M., Ye, Y.: Intelligent malware detection based on file relation graphs. In: 2015 IEEE International Conference on Semantic Computing (ICSC), pp. 85\u201392. IEEE (2015)","DOI":"10.1109\/ICOSC.2015.7050784"},{"issue":"2","key":"12_CR5","doi-asserted-by":"publisher","first-page":"6","DOI":"10.1145\/2089125.2089126","volume":"44","author":"M Egele","year":"2012","unstructured":"Egele, M., Scholte, T., Kirda, E., Kruegel, C.: A survey on automated dynamic malware-analysis techniques and tools. ACM Comput. Surv. (CSUR) 44(2), 6 (2012)","journal-title":"ACM Comput. Surv. (CSUR)"},{"issue":"1","key":"12_CR6","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1007\/s11416-006-0009-x","volume":"2","author":"E Filiol","year":"2006","unstructured":"Filiol, E.: Malware pattern scanning schemes secure against black-box analysis. J. Comput. Virol. 2(1), 35\u201350 (2006)","journal-title":"J. Comput. Virol."},{"issue":"1","key":"12_CR7","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/s11416-006-0026-9","volume":"3","author":"E Filiol","year":"2007","unstructured":"Filiol, E., Jacob, G., Le Liard, M.: Evaluation methodology and theoretical model for antiviral behavioural detection strategies. J. Comput. Virol. 3(1), 23\u201337 (2007)","journal-title":"J. Comput. Virol."},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Kephart, J.O., Arnold, W.C.: Automatic extraction of computer virus signatures. In: 4th Virus Bulletin International Conference, pp. 178\u2013184 (1994)","DOI":"10.1016\/0142-0496(94)90045-0"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Kolter, J.Z., Maloof, M.A.: Learning to detect malicious executables in the wild. In: Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 470\u2013478. ACM (2004)","DOI":"10.1145\/1014052.1014105"},{"issue":"3","key":"12_CR10","first-page":"16","volume":"2","author":"MM Masud","year":"2011","unstructured":"Masud, M.M., Al-Khateeb, T.M., Hamlen, K.W., Gao, J., Khan, L., Han, J., Thuraisingham, B.: Cloud-based malware detection for evolving data streams. ACM Trans. Manag. Inf. Syst. (TMIS) 2(3), 16 (2011)","journal-title":"ACM Trans. Manag. Inf. Syst. (TMIS)"},{"issue":"3","key":"12_CR11","doi-asserted-by":"publisher","first-page":"231","DOI":"10.1007\/s11416-006-0027-8","volume":"2","author":"DKS Reddy","year":"2006","unstructured":"Reddy, D.K.S., Pujari, A.K.: N-gram analysis for computer virus detection. J. Comput. Virol. 2(3), 231\u2013239 (2006)","journal-title":"J. Comput. Virol."},{"key":"12_CR12","doi-asserted-by":"crossref","unstructured":"Schultz, M.G., Eskin, E., Zadok, E., Stolfo, S.J.: Data mining methods for detection of new malicious executables. In: Proceedings of the 2001 IEEE Symposium on Security and Privacy, S&P 2001, pp 38\u201349. IEEE (2001)","DOI":"10.1109\/SECPRI.2001.924286"},{"key":"12_CR13","doi-asserted-by":"crossref","unstructured":"Siddiqui, M., Wang, M.C., Lee, J.: A survey of data mining techniques for malware detection using file features. In: Proceedings of the 46th Annual Southeast Regional Conference on XX, pp. 509\u2013510. ACM (2008)","DOI":"10.1145\/1593105.1593239"},{"key":"12_CR14","doi-asserted-by":"crossref","unstructured":"Tamersoy, A., Roundy, K., Chau, D.H.: Guilt by association: large scale malware detection by mining file-relation graphs. In: Proceedings of the 20th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 1524\u20131533. ACM (2014)","DOI":"10.1145\/2623330.2623342"},{"key":"12_CR15","doi-asserted-by":"crossref","unstructured":"Venzhega, A., Zhinalieva, P., Suboch, N.: Graph-based malware distributors detection. In: Proceedings of the 22nd International Conference on World Wide Web Companion, pp. 1141\u20131144. International World Wide Web Conferences Steering Committee (2013)","DOI":"10.1145\/2487788.2488136"},{"issue":"4","key":"12_CR16","doi-asserted-by":"publisher","first-page":"283","DOI":"10.1007\/s11416-008-0108-y","volume":"5","author":"Y Ye","year":"2009","unstructured":"Ye, Y., Chen, L., Wang, D., Li, T., Jiang, Q., Zhao, M.: SBMDS: an interpretable string based malware detection system using SVM ensemble with bagging. J. Comput. Virol. 5(4), 283\u2013293 (2009)","journal-title":"J. Comput. Virol."},{"issue":"1","key":"12_CR17","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10844-009-0086-7","volume":"35","author":"Y Ye","year":"2010","unstructured":"Ye, Y., Li, T., Huang, K., Jiang, Q., Chen, Y.: Hierarchical associative classifier (HAC) for malware detection from the large and imbalanced gray list. J. Intell. Inf. Syst. 35(1), 1\u201320 (2010)","journal-title":"J. Intell. Inf. Syst."},{"key":"12_CR18","doi-asserted-by":"crossref","unstructured":"Ye, Y., Li, T., Jiang, Q., Han, Z., Wan, L.: Intelligent file scoring system for malware detection from the gray list. In: Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 1385\u20131394. ACM (2009)","DOI":"10.1145\/1557019.1557167"},{"issue":"3","key":"12_CR19","doi-asserted-by":"publisher","first-page":"298","DOI":"10.1109\/TSMCC.2009.2037978","volume":"40","author":"Y Ye","year":"2010","unstructured":"Ye, Y., Li, T., Jiang, Q., Wang, Y.: CIMDS: adapting postprocessing techniques of associative classification for malware detection. IEEE Trans. Syst. Man Cybern. Part C: Appl. Rev. 40(3), 298\u2013307 (2010)","journal-title":"IEEE Trans. Syst. Man Cybern. Part C: Appl. Rev."},{"key":"12_CR20","doi-asserted-by":"crossref","unstructured":"Ye, Y., Li, T., Zhu, S., Zhuang, W., Tas, E., Gupta, U., Abdulhayoglu, M.: Combining file content and file relations for cloud based malware detection. In: Proceedings of the 17th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 222\u2013230. ACM (2011)","DOI":"10.1145\/2020408.2020448"},{"key":"12_CR21","doi-asserted-by":"crossref","unstructured":"Ye, Y., Wang, D., Li, T., Ye, D.: IMDS: Intelligent malware detection system. In: Proceedings of the 13th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 1043\u20131047. ACM (2007)","DOI":"10.1145\/1281192.1281308"},{"issue":"4","key":"12_CR22","doi-asserted-by":"publisher","first-page":"323","DOI":"10.1007\/s11416-008-0082-4","volume":"4","author":"Y Ye","year":"2008","unstructured":"Ye, Y., Wang, D., Li, T., Ye, D., Jiang, Q.: An intelligent pe-malware detection system based on association mining. J. Comput. Virol. 4(4), 323\u2013334 (2008)","journal-title":"J. Comput. Virol."},{"key":"12_CR23","unstructured":"Zhu, X., Ghahramani, Z.: Learning from labeled and unlabeled data with label propagation. Technical report. Citeseer (2002)"}],"container-title":["Lecture Notes in Computer Science","Web Information Systems Engineering \u2013 WISE 2015"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-26187-4_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,31]],"date-time":"2025-05-31T04:24:51Z","timestamp":1748665491000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-26187-4_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319261867","9783319261874"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-26187-4_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015]]}}}