{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T17:58:51Z","timestamp":1781200731628,"version":"3.54.1"},"publisher-location":"Singapore","reference-count":20,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819202621","type":"print"},{"value":"9789819202638","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-92-0263-8_35","type":"book-chapter","created":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T17:16:48Z","timestamp":1781198208000},"page":"516-531","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Leveraging LLMs to\u00a0Support Malware Analysis from\u00a0Structured and Semantic Binary Data"],"prefix":"10.1007","author":[{"given":"Nguyen Khac","family":"Hau","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tran Tuan","family":"Anh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Trong-Nghia","family":"To","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Do Thi Thu","family":"Hien","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thai Hung","family":"Van","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Phan The","family":"Duy","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,2]]},"reference":[{"key":"35_CR1","unstructured":"Apt malware dataset. https:\/\/github.com\/cyber-research\/APTMalware.git"},{"key":"35_CR2","unstructured":"Abuse.ch: Malware bazaar dataset. https:\/\/datalake.abuse.ch\/malware-bazaar\/daily\/"},{"key":"35_CR3","unstructured":"AV-TEST Institute: Malware statistics (2024). https:\/\/www.av-test.org\/en\/statistics\/malware"},{"key":"35_CR4","doi-asserted-by":"publisher","first-page":"103430","DOI":"10.1016\/j.cose.2023.103430","volume":"134","author":"M Bayer","year":"2023","unstructured":"Bayer, M., Frey, T., Reuter, C.: Multi-level fine-tuning, data augmentation, and few-shot learning for specialized cyber threat intelligence. Comput. Secur. 134, 103430 (2023)","journal-title":"Comput. Secur."},{"key":"35_CR5","doi-asserted-by":"publisher","first-page":"58488","DOI":"10.1109\/ACCESS.2022.3179384","volume":"10","author":"D Dem\u0131rc\u0131","year":"2022","unstructured":"Dem\u0131rc\u0131, D., Acarturk, C.: Static malware detection using stacked BiLSTM and GPT-2. IEEE Access 10, 58488\u201358502 (2022)","journal-title":"IEEE Access"},{"key":"35_CR6","doi-asserted-by":"crossref","unstructured":"Devadiga, D., et al.: Gleam: Gan and LLM for evasive adversarial malware. In: 2023 14th International Conference on Information and Communication Technology Convergence (ICTC), pp. 53\u201358. IEEE (2023)","DOI":"10.1109\/ICTC58733.2023.10393706"},{"issue":"6","key":"35_CR7","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3638552","volume":"56","author":"MG Gaber","year":"2024","unstructured":"Gaber, M.G., Ahmed, M., Janicke, H.: Malware detection with artificial intelligence: a systematic literature review. ACM Comput. Surv. 56(6), 1\u201333 (2024)","journal-title":"ACM Comput. Surv."},{"key":"35_CR8","doi-asserted-by":"crossref","unstructured":"Gao, Y., Hasegawa, H., Yamaguchi, Y., Shimada, H.: Malware detection using attributed CFG generated by pre-trained language model with graph isomorphism network. In: 2022 IEEE 46th Annual Computers, Software, and Applications Conference (COMPSAC), pp. 1495\u20131501. IEEE (2022)","DOI":"10.1109\/COMPSAC54236.2022.00237"},{"issue":"8","key":"35_CR9","doi-asserted-by":"publisher","first-page":"3861","DOI":"10.3390\/s23083861","volume":"23","author":"A Ghourabi","year":"2023","unstructured":"Ghourabi, A., Alohaly, M.: Enhancing spam message classification and detection using transformer-based embedding and ensemble learning. Sensors 23(8), 3861 (2023)","journal-title":"Sensors"},{"key":"35_CR10","doi-asserted-by":"crossref","unstructured":"Guo, W., Xue, J., Liu, Z., Han, W., Hu, J.: Malgta: large language model-based guided malware tactical analysis: W. Guo et al. J. Supercomputing 81(9), 1049 (2025)","DOI":"10.1007\/s11227-025-07545-8"},{"key":"35_CR11","doi-asserted-by":"crossref","unstructured":"Hu, J.L., Ebrahimi, M., Chen, H.: Single-shot black-box adversarial attacks against malware detectors: a causal language model approach. In: 2021 IEEE International Conference on Intelligence and Security Informatics (ISI), pp.\u00a01\u20136. IEEE (2021)","DOI":"10.1109\/ISI53945.2021.9624787"},{"key":"35_CR12","doi-asserted-by":"crossref","unstructured":"Jelodar, H., Bai, S., Hamedi, P., Mohammadian, H., Razavi-Far, R., Ghorbani, A.: Large language model (LLM) for software security: code analysis, malware analysis, reverse engineering. arXiv preprint arXiv:2504.07137 (2025)","DOI":"10.1016\/j.jisa.2026.104390"},{"key":"35_CR13","doi-asserted-by":"publisher","unstructured":"Kra\u0161ovec, A., Steri, G., Karopoulos, G., Trapani, M.: Large language models for cyber threat intelligence: extracting MITRE with LLMs. In: International Conference on Availability, Reliability and Security, pp. 80\u201389. Springer (2025). https:\/\/doi.org\/10.1007\/978-3-032-00633-2_5","DOI":"10.1007\/978-3-032-00633-2_5"},{"issue":"3","key":"35_CR14","first-page":"3133","volume":"143","author":"JY Kuo","year":"2025","unstructured":"Kuo, J.Y., Wang, P.F., Hsieh, T.F., Kuo, C.H.: Malware of dynamic behavior and attack patterns using att&ck framework. Comput. Model. Eng. Sci. 143(3), 3133\u20133166 (2025)","journal-title":"Comput. Model. Eng. Sci."},{"key":"35_CR15","unstructured":"Nahmias, D., Engelberg, G., Klein, D., Shabtai, A.: Prompted contextual vectors for spear-phishing detection. arXiv preprint arXiv:2402.08309 (2024)"},{"key":"35_CR16","doi-asserted-by":"crossref","unstructured":"Setianto, F., Tsani, E., Sadiq, F., Domalis, G., Tsakalidis, D., Kostakos, P.: Gpt-2c: a parser for honeypot logs using large pre-trained language models. In: Proceedings of the 2021 IEEE\/ACM International Conference on Advances in Social Networks Analysis and Mining, pp. 649\u2013653 (2021)","DOI":"10.1145\/3487351.3492723"},{"key":"35_CR17","doi-asserted-by":"crossref","unstructured":"Sihwail, R., Omar, K., Ariffin, K.Z.: A survey on malware analysis techniques: static, dynamic, hybrid and memory analysis. Int. J. Adv. Sci. Eng. Inf. Technol 8(4-2), 1662\u20131671 (2018)","DOI":"10.18517\/ijaseit.8.4-2.6827"},{"key":"35_CR18","unstructured":"Strom, B.E., Applebaum, A., Miller, D.P., Nickels, K.C., Pennington, A.G., Thomas, C.B.: Mitre att&ck: design and philosophy. Technical report. The MITRE Corporation (2018)"},{"key":"35_CR19","doi-asserted-by":"crossref","unstructured":"Walton, B.J., Khatun, M.E., Ghawaly, J.M., Ali-Gombe, A.: Exploring large language models for semantic analysis and categorization of android malware. In: 2024 Annual Computer Security Applications Conference Workshops (ACSAC Workshops), pp. 248\u2013254. IEEE (2024)","DOI":"10.1109\/ACSACW65225.2024.00035"},{"key":"35_CR20","doi-asserted-by":"crossref","unstructured":"Zhang, J., Wen, H., Li, L., Zhu, H.: Unittp: a unified framework for tactics, techniques, and procedures mapping in cyber threats. In: 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), pp. 1580\u20131588. IEEE (2024)","DOI":"10.1109\/TrustCom63139.2024.00218"}],"container-title":["Communications in Computer and Information Science","Recent Challenges in Intelligent Information and Database Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-92-0263-8_35","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T17:16:53Z","timestamp":1781198213000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-92-0263-8_35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9789819202621","9789819202638"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-981-92-0263-8_35","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"value":"1865-0929","type":"print"},{"value":"1865-0937","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"2 July 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ACIIDS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Asian Conference on Intelligent Information and Database Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Kaohsiung","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Taiwan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 April 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 April 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"aciids2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/aciids.pwr.edu.pl\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}