{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T16:56:17Z","timestamp":1785603377567,"version":"3.56.0"},"reference-count":79,"publisher":"Springer Science and Business Media LLC","issue":"13","license":[{"start":{"date-parts":[[2025,9,22]],"date-time":"2025-09-22T00:00:00Z","timestamp":1758499200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,22]],"date-time":"2025-09-22T00:00:00Z","timestamp":1758499200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"Deanship of Scientific Research and Innovation, Al-Balqa Applied University","award":["DSR-2022#499"],"award-info":[{"award-number":["DSR-2022#499"]}]},{"name":"Deanship of Scientific Research and Innovation, Al-Balqa Applied University","award":["DSR-2022#499"],"award-info":[{"award-number":["DSR-2022#499"]}]},{"name":"Deanship of Scientific Research and Innovation, Al-Balqa Applied University","award":["DSR-2022#499"],"award-info":[{"award-number":["DSR-2022#499"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2025,11]]},"DOI":"10.1007\/s10586-025-05549-w","type":"journal-article","created":{"date-parts":[[2025,9,22]],"date-time":"2025-09-22T12:12:07Z","timestamp":1758543127000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["A feature-learning-enabled malware analysis for enhanced IoT-centric cybersecurity"],"prefix":"10.1007","volume":"28","author":[{"given":"Jafar A.","family":"Alzubi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Omar A.","family":"Alzubi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Issa","family":"Qiqieh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,9,22]]},"reference":[{"key":"5549_CR1","doi-asserted-by":"crossref","unstructured":"Jabraeil\u00a0Jamali, M., Bahrami, B., Heidari, A., Allahverdizadeh, P., Norouzi, F.: Towards the internet of things: Architectures, security, and applications, (2019)","DOI":"10.1007\/978-3-030-18468-1"},{"key":"5549_CR2","doi-asserted-by":"crossref","first-page":"51964","DOI":"10.1109\/ACCESS.2018.2870534","volume":"6","author":"J Zhang","year":"2018","unstructured":"Zhang, J., Qin, Z., Zhang, K., Yin, H., Zou, J.: Dalvik opcode graph based android malware variants detection using global topology features. IEEE Access 6, 51964\u201351974 (2018)","journal-title":"IEEE Access"},{"key":"5549_CR3","doi-asserted-by":"crossref","unstructured":"Bhattacharya, P., Tanwar, S.: Malware analysis framework using graph theory, Authorea Preprints, (2022)","DOI":"10.22541\/au.165893037.78770014\/v1"},{"key":"5549_CR4","doi-asserted-by":"crossref","unstructured":"Liu, C.-H., Zhang, Z.-J., Wang, S.-D.: An android malware detection approach using bayesian inference. in 2016 IEEE International Conference on Computer and Information Technology (CIT). IEEE, pp. 476\u2013483 (2016)","DOI":"10.1109\/CIT.2016.76"},{"issue":"4","key":"5549_CR5","doi-asserted-by":"crossref","first-page":"323","DOI":"10.1080\/01969722.2018.1552906","volume":"50","author":"A Sharma","year":"2019","unstructured":"Sharma, A., Gandotra, E., Bansal, D., Gupta, D.: Malware capability assessment using fuzzy logic. Cybern. Syst. 50(4), 323\u2013338 (2019)","journal-title":"Cybern. Syst."},{"issue":"1","key":"5549_CR6","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1080\/01969722.2016.1262704","volume":"48","author":"E Gandotra","year":"2017","unstructured":"Gandotra, E., Bansal, D., Sofat, S.: Malware threat assessment using fuzzy logic paradigm. Cybern. Syst. 48(1), 29\u201348 (2017)","journal-title":"Cybern. Syst."},{"key":"5549_CR7","doi-asserted-by":"crossref","unstructured":"Bernardi, M.L., Cimitile, M., Martinelli, F., Mercaldo, F.: A fuzzy-based process mining approach for dynamic malware detection, in 2017 IEEE International Conference on Fuzzy Systems (FUZZ-IEEE). IEEE, pp. 1\u20138 (2017)","DOI":"10.1109\/FUZZ-IEEE.2017.8015490"},{"key":"5549_CR8","doi-asserted-by":"crossref","DOI":"10.1016\/j.pmcj.2021.101336","volume":"72","author":"SK Sasidharan","year":"2021","unstructured":"Sasidharan, S.K., Thomas, C.: Prodroid-an android malware detection framework based on profile hidden markov model. Pervasive Mob. Comput. 72, 101336 (2021)","journal-title":"Pervasive Mob. Comput."},{"key":"5549_CR9","first-page":"1","volume":"18","author":"YT Ling","year":"2021","unstructured":"Ling, Y.T., Sani, N.F.M., Abdullah, M.T., Hamid, N.A.W.A.: Metamorphic malware detection using structural features and nonnegative matrix factorization with hidden markov model. J. Comput. Virol. Hacking Tech. 18, 1\u201321 (2021)","journal-title":"J. Comput. Virol. Hacking Tech."},{"key":"5549_CR10","doi-asserted-by":"crossref","unstructured":"Rathore, H., Agarwal, S., Sahay, S.K., Sewak, M.: Malware detection using machine learning and deep learning, in Big Data Analytics: 6th International Conference, BDA: Warangal, India, December 18\u201321, 2018, Proceedings 6. Springer, 402\u2013411 (2018)","DOI":"10.1007\/978-3-030-04780-1_28"},{"issue":"2","key":"5549_CR11","doi-asserted-by":"crossref","first-page":"551","DOI":"10.3390\/iot1020030","volume":"1","author":"DW Fernando","year":"2020","unstructured":"Fernando, D.W., Komninos, N., Chen, T.: A study on the evolution of ransomware detection using machine learning and deep learning techniques. IoT 1(2), 551\u2013604 (2020)","journal-title":"IoT"},{"key":"5549_CR12","doi-asserted-by":"crossref","first-page":"46717","DOI":"10.1109\/ACCESS.2019.2906934","volume":"7","author":"R Vinayakumar","year":"2019","unstructured":"Vinayakumar, R., Alazab, M., Soman, K., Poornachandran, P., Venkatraman, S.: Robust intelligent malware detection using deep learning. IEEE Access 7, 46717\u201346738 (2019)","journal-title":"IEEE Access"},{"key":"5549_CR13","doi-asserted-by":"crossref","unstructured":"Andreopoulos, W.B.: Malware detection with sequence-based machine learning and deep learning. Malware Analysis Using Artificial Intelligence and Deep Learning 53\u201370 (2021)","DOI":"10.1007\/978-3-030-62582-5_2"},{"key":"5549_CR14","unstructured":"Hardy, W., Chen, L., Hou, S., Ye, Y., Li, X.: Dl4md: A deep learning framework for intelligent malware detection, in Proceedings of the International Conference on Data Science (ICDATA). The Steering Committee of The World Congress in Computer Science, Computer Engineering and Applied Computing (WorldComp), p.\u00a061 (2016)"},{"issue":"10","key":"5549_CR15","doi-asserted-by":"crossref","first-page":"5183","DOI":"10.1007\/s00521-020-05309-4","volume":"33","author":"A Mahindru","year":"2021","unstructured":"Mahindru, A., Sangal, A.: Mldroid-framework for android malware detection using machine learning techniques. Neural Comput. Appl. 33(10), 5183\u20135240 (2021)","journal-title":"Neural Comput. Appl."},{"key":"5549_CR16","doi-asserted-by":"crossref","unstructured":"Zhu, D., Jin, H., Yang, Y., Wu, D., Chen, W., Deepflow: Deep learning-based malware detection by mining android application for abnormal usage of sensitive data, in IEEE symposium on computers and communications (ISCC). IEEE 438\u2013443 (2017)","DOI":"10.1109\/ISCC.2017.8024568"},{"issue":"5","key":"5549_CR17","doi-asserted-by":"crossref","first-page":"2211","DOI":"10.1007\/s40747-021-00396-9","volume":"7","author":"V Kumar","year":"2021","unstructured":"Kumar, V., Sinha, D.: A robust intelligent zero-day cyber-attack detection technique. Complex Intell. Syst. 7(5), 2211\u20132234 (2021)","journal-title":"Complex Intell. Syst."},{"issue":"9","key":"5549_CR18","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1016\/S1353-4858(16)30086-1","volume":"2016","author":"R Brewer","year":"2016","unstructured":"Brewer, R.: Ransomware attacks: detection, prevention and cure. Netw. Secur. 2016(9), 5\u20139 (2016)","journal-title":"Netw. Secur."},{"key":"5549_CR19","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1016\/j.cose.2018.11.001","volume":"81","author":"D Ucci","year":"2019","unstructured":"Ucci, D., Aniello, L., Baldoni, R.: Survey of machine learning techniques for malware analysis. Comput. Secur. 81, 123\u2013147 (2019)","journal-title":"Comput. Secur."},{"key":"5549_CR20","doi-asserted-by":"crossref","DOI":"10.1016\/j.sysarc.2020.101861","volume":"112","author":"J Singh","year":"2021","unstructured":"Singh, J., Singh, J.: A survey on machine learning-based malware detection in executable files. J. Syst. Architect. 112, 101861 (2021)","journal-title":"J. Syst. Architect."},{"issue":"5","key":"5549_CR21","doi-asserted-by":"crossref","first-page":"185","DOI":"10.3390\/info12050185","volume":"12","author":"V Kouliaridis","year":"2021","unstructured":"Kouliaridis, V., Kambourakis, G.: A comprehensive survey on machine learning techniques for android malware detection. Information 12(5), 185 (2021)","journal-title":"Information"},{"issue":"4","key":"5549_CR22","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3473039","volume":"24","author":"L Demetrio","year":"2021","unstructured":"Demetrio, L., Coull, S.E., Biggio, B., Lagorio, G., Armando, A., Roli, F.: Adversarial exemples: a survey and experimental evaluation of practical attacks on machine learning for windows malware detection. ACM Trans. Priv. Secur. (TOPS) 24(4), 1\u201331 (2021)","journal-title":"ACM Trans. Priv. Secur. (TOPS)"},{"key":"5549_CR23","volume":"14","author":"SK Smmarwar","year":"2024","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Android malware detection and identification frameworks by leveraging the machine and deep learning techniques: A comprehensive review. Telemat. Inform. Rep. 14, 100130 (2024)","journal-title":"Telemat. Inform. Rep."},{"key":"5549_CR24","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: A study on data sharing using blockchain system and its challenges and applications, Advances in Malware and Data-Driven Network Security, pp. 199\u2013218, (2022)","DOI":"10.4018\/978-1-7998-7789-9.ch011"},{"key":"5549_CR25","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Research trends for malware and intrusion detection on network systems: a topic modelling approach, Advances in Malware and Data-Driven Network Security, pp. 19\u201340, (2022)","DOI":"10.4018\/978-1-7998-7789-9.ch002"},{"key":"5549_CR26","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Malware detection framework based on iterative neighborhood component analysis for internet of medical things, in International Conference on Biomedical Engineering Science and Technology. Springer, pp. 98\u2013106 (2023)","DOI":"10.1007\/978-3-031-54547-4_8"},{"key":"5549_CR27","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Design of a fused triple convolutional neural network for malware detection: A visual classification approach, in Advances in Computing and Data Sciences: 5th International Conference, ICACDS: Nashik, India, April 23\u201324, 2021, Revised Selected Papers, Part I 5. Springer, 279\u2013289 (2021)","DOI":"10.1007\/978-3-030-81462-5_26"},{"key":"5549_CR28","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Analysis of feature selection methods for android malware detection using machine learning techniques, in Big Data Analytics in Fog-Enabled IoT Networks. CRC Press, pp. 173\u2013196 (2023)","DOI":"10.1201\/9781003264545-8"},{"issue":"10","key":"5549_CR29","doi-asserted-by":"crossref","first-page":"6754","DOI":"10.1109\/TII.2020.3048791","volume":"17","author":"P Mishra","year":"2021","unstructured":"Mishra, P., Aggarwal, P., Vidyarthi, A., Singh, P., Khan, B., Alhelou, H.H., Siano, P.: Vmshield: Memory introspection-based malware detection to secure cloud-based services against stealthy attacks. IEEE Trans. Industr. Inf. 17(10), 6754\u20136764 (2021)","journal-title":"IEEE Trans. Industr. Inf."},{"issue":"01","key":"5549_CR30","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1142\/S0218194019500037","volume":"29","author":"RS Arslan","year":"2019","unstructured":"Arslan, R.S., Do\u011fru, \u0130A., Bari\u015f\u00e7i, N.: Permission-based malware detection system for android using machine learning techniques. Int. J. Software Eng. Knowl. Eng. 29(01), 43\u201361 (2019)","journal-title":"Int. J. Software Eng. Knowl. Eng."},{"key":"5549_CR31","volume":"101","author":"Z Ren","year":"2020","unstructured":"Ren, Z., Wu, H., Ning, Q., Hussain, I., Chen, B.: End-to-end malware detection for android iot devices using deep learning. Ad Hoc Netw. 101, 102098 (2020)","journal-title":"Ad Hoc Netw."},{"key":"5549_CR32","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2021.107783","volume":"112","author":"ME Khoda","year":"2021","unstructured":"Khoda, M.E., Kamruzzaman, J., Gondal, I., Imam, T., Rahman, A.: Malware detection in edge devices with fuzzy oversampling and dynamic class weighting. Appl. Soft Comput. 112, 107783 (2021)","journal-title":"Appl. Soft Comput."},{"key":"5549_CR33","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.123808","volume":"249","author":"H Nandanwar","year":"2024","unstructured":"Nandanwar, H., Katarya, R.: Deep learning enabled intrusion detection system for industrial iot environment. Expert Syst. Appl. 249, 123808 (2024)","journal-title":"Expert Syst. Appl."},{"key":"5549_CR34","volume":"54","author":"SK Smmarwar","year":"2022","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S., Kumar, P.: An optimized and efficient android malware detection framework for future sustainable computing. Sustainable Energy Technol. Assess. 54, 102852 (2022)","journal-title":"Sustainable Energy Technol. Assess."},{"key":"5549_CR35","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Xai-amd-dl: An explainable ai approach for android malware detection system using deep learning, in 2023 IEEE World Conference on Applied Intelligence and Computing (AIC). IEEE, pp. 423\u2013428 (2023)","DOI":"10.1109\/AIC57670.2023.10263974"},{"issue":"5","key":"5549_CR36","doi-asserted-by":"crossref","first-page":"2947","DOI":"10.1007\/s10586-023-04028-4","volume":"26","author":"T Gueye","year":"2023","unstructured":"Gueye, T., Wang, Y., Rehman, M., Mushtaq, R.T., Zahoor, S.: A novel method to detect cyber-attacks in iot\/iiot devices on the modbus protocol using deep learning. Clust. Comput. 26(5), 2947\u20132973 (2023)","journal-title":"Clust. Comput."},{"key":"5549_CR37","doi-asserted-by":"crossref","first-page":"83252","DOI":"10.1109\/ACCESS.2021.3087316","volume":"9","author":"\u00d6 Aslan","year":"2021","unstructured":"Aslan, \u00d6., Ozkan-Okay, M., Gupta, D.: Intelligent behavior-based malware detection system on cloud computing environment. IEEE Access 9, 83252\u201383271 (2021)","journal-title":"IEEE Access"},{"key":"5549_CR38","doi-asserted-by":"crossref","first-page":"128250","DOI":"10.1109\/ACCESS.2020.3008433","volume":"8","author":"S Zhang","year":"2020","unstructured":"Zhang, S., Xie, X., Xu, Y.: A brute-force black-box method to attack machine learning-based systems in cybersecurity. IEEE Access 8, 128250\u2013128263 (2020)","journal-title":"IEEE Access"},{"key":"5549_CR39","doi-asserted-by":"crossref","unstructured":"He, Z., Miari, T., Makrani, H.M., Aliasgari, M., Homayoun, H., Sayadi, H., When machine learning meets hardware cybersecurity: Delving into accurate zero-day malware detection, in 22nd International Symposium on Quality Electronic Design (ISQED). IEEE, 85\u201390 (2021)","DOI":"10.1109\/ISQED51717.2021.9424330"},{"key":"5549_CR40","doi-asserted-by":"crossref","unstructured":"Alhanahnah, M., Lin, Q., Yan, Q., Zhang, N., Chen, Z.: Efficient signature generation for classifying cross-architecture iot malware, in 2018 IEEE Conference on Communications and Network Security (CNS). IEEE, pp. 1\u20139 (2018)","DOI":"10.1109\/CNS.2018.8433203"},{"key":"5549_CR41","doi-asserted-by":"crossref","unstructured":"Ganesan, S., Ravi, V., Krichen, M., Sowmya, V., Alroobaea, R., Soman, K.: Robust malware detection using residual attention network, in IEEE international conference on consumer electronics (ICCE). IEEE, 1\u20136 (2021)","DOI":"10.1109\/ICCE50685.2021.9427623"},{"issue":"4","key":"5549_CR42","doi-asserted-by":"crossref","first-page":"485","DOI":"10.3390\/electronics10040485","volume":"10","author":"R Dama\u0161evi\u010dius","year":"2021","unstructured":"Dama\u0161evi\u010dius, R., Ven\u010dkauskas, A., Toldinas, J., Grigali\u016bnas, \u0160: Ensemble-based classification using neural networks and machine learning models for windows pe malware detection. Electronics 10(4), 485 (2021)","journal-title":"Electronics"},{"key":"5549_CR43","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1016\/j.future.2018.03.007","volume":"85","author":"H HaddadPajouh","year":"2018","unstructured":"HaddadPajouh, H., Dehghantanha, A., Khayami, R., Choo, K.-K.R.: A deep recurrent neural network based approach for internet of things malware threat hunting. Futur. Gener. Comput. Syst. 85, 88\u201396 (2018)","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"4","key":"5549_CR44","doi-asserted-by":"crossref","first-page":"639","DOI":"10.3233\/JCS-2010-0410","volume":"19","author":"K Rieck","year":"2011","unstructured":"Rieck, K., Trinius, P., Willems, C., Holz, T.: Automatic analysis of malware behavior using machine learning. J. Comput. Secur. 19(4), 639\u2013668 (2011)","journal-title":"J. Comput. Secur."},{"key":"5549_CR45","doi-asserted-by":"crossref","unstructured":"David, O.E., Netanyahu, N.S.: Deepsign: Deep learning for automatic malware signature generation and classification, in 2015 International Joint Conference on Neural Networks (IJCNN). IEEE, pp. 1\u20138 (2015)","DOI":"10.1109\/IJCNN.2015.7280815"},{"key":"5549_CR46","doi-asserted-by":"crossref","unstructured":"Gandotra, E., Bansal, D., Sofat, S.: Zero-day malware detection, in Sixth international symposium on embedded computing and system design (ISED). IEEE, 171\u2013175 (2016)","DOI":"10.1109\/ISED.2016.7977076"},{"issue":"10","key":"5549_CR47","doi-asserted-by":"crossref","first-page":"8445","DOI":"10.1109\/JIOT.2023.3237661","volume":"10","author":"A Heidari","year":"2023","unstructured":"Heidari, A., Navimipour, N.J., Unal, M.: A secure intrusion detection platform using blockchain and radial basis function neural networks for internet of drones. IEEE Internet Things J. 10(10), 8445\u20138454 (2023)","journal-title":"IEEE Internet Things J."},{"key":"5549_CR48","doi-asserted-by":"crossref","DOI":"10.1016\/j.cosrev.2024.100666","volume":"54","author":"Z Amiri","year":"2024","unstructured":"Amiri, Z., Heidari, A., Jafari, N., Hosseinzadeh, M.: Deep study on autonomous learning techniques for complex pattern recognition in interconnected information systems. Comput. Sci. Rev. 54, 100666 (2024)","journal-title":"Comput. Sci. Rev."},{"issue":"1","key":"5549_CR49","volume":"36","author":"A Mazid","year":"2025","unstructured":"Mazid, A., Kirmani, S., Manaullah, Yadav, M.: Fl-idpp: A federated learning based intrusion detection approach with privacy preservation. Trans. Emerg. Telecommun. Technol. 36(1), e70039 (2025)","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"5549_CR50","doi-asserted-by":"crossref","unstructured":"Mazid, A., Kirmani, S., Abid, M.: Enhanced intrusion detection framework for securing iot network using principal component analysis and cnn, Information Security Journal: A Global Perspective, pp. 1\u201321, (2024)","DOI":"10.1080\/19393555.2024.2408256"},{"issue":"24","key":"5549_CR51","doi-asserted-by":"crossref","first-page":"11804","DOI":"10.3390\/app142411804","volume":"14","author":"HC Altunay","year":"2024","unstructured":"Altunay, H.C., Albayrak, Z.: Sms spam detection system based on deep learning architectures for turkish and english messages. Appl. Sci. 14(24), 11804 (2024)","journal-title":"Appl. Sci."},{"issue":"1","key":"5549_CR52","doi-asserted-by":"crossref","first-page":"55","DOI":"10.3233\/JHS-200630","volume":"26","author":"K Muthamil Sudar","year":"2020","unstructured":"Muthamil Sudar, K., Deepalakshmi, P.: A two level security mechanism to detect a ddos flooding attack in software-defined networks using entropy-based and c4. 5 technique. J. High Speed Netw. 26(1), 55\u201376 (2020)","journal-title":"J. High Speed Netw."},{"issue":"3","key":"5549_CR53","first-page":"4237","volume":"40","author":"K Muthamil Sudar","year":"2021","unstructured":"Muthamil Sudar, K., Deepalakshmi, P.: An intelligent flow-based and signature-based ids for sdns using ensemble feature selection and a multi-layer machine learning-based classifier. J. Intell. Fuzzy Syst. 40(3), 4237\u20134256 (2021)","journal-title":"J. Intell. Fuzzy Syst."},{"issue":"2","key":"5549_CR54","doi-asserted-by":"crossref","first-page":"1461","DOI":"10.1007\/s10586-022-03666-4","volume":"26","author":"KM Sudar","year":"2023","unstructured":"Sudar, K.M., Deepalakshmi, P., Singh, A., Srinivasu, P.N.: Tfad: Tcp flooding attack detection in software-defined networking using proxy-based and machine learning-based mechanisms. Clust. Comput. 26(2), 1461\u20131477 (2023)","journal-title":"Clust. Comput."},{"key":"5549_CR55","doi-asserted-by":"crossref","unstructured":"Darus, F.M., Salleh, N.A.A., Ariffin, A.F.M.: Android malware detection using machine learning on image patterns, in Cyber Resilience Conference (CRC). IEEE, 1\u20132 (2018)","DOI":"10.1109\/CR.2018.8626828"},{"key":"5549_CR56","doi-asserted-by":"crossref","unstructured":"Babaagba, K.O., Adesanya, S.O.: A study on the effect of feature selection on malware analysis using machine learning,\u201d in Proceedings of the 2019 8th international conference on educational and information technology, pp. 51\u201355 (2019)","DOI":"10.1145\/3318396.3318448"},{"key":"5549_CR57","doi-asserted-by":"crossref","first-page":"119710","DOI":"10.1109\/ACCESS.2020.3003785","volume":"8","author":"F Khan","year":"2020","unstructured":"Khan, F., Ncube, C., Ramasamy, L.K., Kadry, S., Nam, Y.: A digital dna sequencing engine for ransomware detection using machine learning. IEEE Access 8, 119710\u2013119719 (2020)","journal-title":"IEEE Access"},{"key":"5549_CR58","doi-asserted-by":"crossref","first-page":"124","DOI":"10.1016\/j.future.2021.01.004","volume":"118","author":"N Usman","year":"2021","unstructured":"Usman, N., Usman, S., Khan, F., Jan, M.A., Sajid, A., Alazab, M., Watters, P.: Intelligent dynamic malware detection using machine learning in ip reputation for forensics data analytics. Futur. Gener. Comput. Syst. 118, 124\u2013141 (2021)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"5549_CR59","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2022.108410","volume":"104","author":"SK Smmarwar","year":"2022","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: Deep malware detection framework for IoT-based smart agriculture. Comput. Electr. Eng. 104, 108410 (2022)","journal-title":"Comput. Electr. Eng."},{"key":"5549_CR60","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2023.108731","volume":"108","author":"SK Smmarwar","year":"2023","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: AI-empowered malware detection system for industrial internet of things. Comput. Electr. Eng. 108, 108731 (2023)","journal-title":"Comput. Electr. Eng."},{"key":"5549_CR61","doi-asserted-by":"crossref","DOI":"10.1016\/j.dss.2024.114351","volume":"188","author":"P Kumar","year":"2025","unstructured":"Kumar, P., Javeed, D., Islam, A.N., Luo, X.R.: Deepsecure: A computational design science approach for interpretable threat hunting in cybersecurity decision making. Decis. Support Syst. 188, 114351 (2025)","journal-title":"Decis. Support Syst."},{"key":"5549_CR62","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104109","volume":"148","author":"P Kumar","year":"2025","unstructured":"Kumar, P., Jolfaei, A., Islam, A.N.: An enhanced deep-learning empowered threat-hunting framework for software-defined internet of things. Comput. Secur. 148, 104109 (2025)","journal-title":"Comput. Secur."},{"key":"5549_CR63","doi-asserted-by":"crossref","first-page":"12647","DOI":"10.1109\/ACCESS.2025.3526878","volume":"13","author":"S Panja","year":"2025","unstructured":"Panja, S., Mondal, S., Nag, A., Singh, J.P., Saikia, M.J., Barman, A.K.: An efficient malware detection approach based on machine learning feature influence techniques for resource-constrained devices. IEEE Access 13, 12647\u201312665 (2025)","journal-title":"IEEE Access"},{"key":"5549_CR64","doi-asserted-by":"crossref","unstructured":"Panja, S., Yadav, K., Nag, A.: Anomaly detection at the iot edge in iot-based smart home environment using deep learning,\u201d in Proceedings of International Conference on Advanced Computing Applications: ICACA 2021. Springer, pp. 119\u2013125 (2022)","DOI":"10.1007\/978-981-16-5207-3_11"},{"key":"5549_CR65","doi-asserted-by":"crossref","unstructured":"Hota, A., Panja, S., Nag, A.: Lightweight cnn-based malware image classification for resource-constrained applications. Innovations in Systems and Software Engineering, 1\u201314 (2022)","DOI":"10.1007\/s11334-022-00461-7"},{"key":"5549_CR66","doi-asserted-by":"crossref","unstructured":"Kakati, S., Chouhan, D., Nag, A., Panja, S.: Survey on recent malware detection techniques for iot, in Pattern Recognition and Data Analysis with Applications. Springer, pp. 647\u2013659 (2022)","DOI":"10.1007\/978-981-19-1520-8_53"},{"key":"5549_CR67","doi-asserted-by":"crossref","unstructured":"Smmarwar, S.K., Gupta, G.P., Kumar, S.: A hybrid feature selection approach-based android malware detection framework using machine learning techniques, in Cyber Security, Privacy and Networking: Proceedings of ICSPN 2021. Springer, pp. 347\u2013356 (2022)","DOI":"10.1007\/978-981-16-8664-1_30"},{"issue":"4","key":"5549_CR68","doi-asserted-by":"crossref","first-page":"2637","DOI":"10.1007\/s11277-022-10063-y","volume":"128","author":"LK Vashishtha","year":"2023","unstructured":"Vashishtha, L.K., Singh, A.P., Chatterjee, K.: HIDM: A hybrid intrusion detection model for cloud based systems. Wireless Pers. Commun. 128(4), 2637\u20132666 (2023)","journal-title":"Wireless Pers. Commun."},{"key":"5549_CR69","doi-asserted-by":"crossref","unstructured":"Cunningham, R.K., Lippmann, R.P., Fried, D.J., Garfinkel, S.L., Graf, I., Kendall, K.R., Webster, S.E., Wyschogrod, D., Zissman, M.A.: Evaluating intrusion detection systems without attacking your friends: The 1998 darpa intrusion detection evaluation. Proceedings of ID 99, (1999)","DOI":"10.21236\/ADA526274"},{"key":"5549_CR70","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the kdd cup 99 data set, in: IEEE symposium on computational intelligence for security and defense applications. Ieee, 1\u20136 (2009)","DOI":"10.1109\/CISDA.2009.5356528"},{"issue":"6","key":"5549_CR71","first-page":"446","volume":"4","author":"L Dhanabal","year":"2015","unstructured":"Dhanabal, L., Shantharajah, S.: A study on nsl-kdd dataset for intrusion detection system based on classification algorithms. Int. J. advanced Res. Comput. Commun. Eng. 4(6), 446\u2013452 (2015)","journal-title":"Int. J. advanced Res. Comput. Commun. Eng."},{"issue":"2018","key":"5549_CR72","first-page":"108","volume":"1","author":"I Sharafaldin","year":"2018","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A., et al.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. ICISSp 1(2018), 108\u2013116 (2018)","journal-title":"ICISSp"},{"key":"5549_CR73","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: CSE-CIC-IDS2018, (2022). [Online]. Available: https:\/\/www.kaggle.com\/dsv\/4059899"},{"key":"5549_CR74","doi-asserted-by":"publisher","unstructured":"Vashishtha, L., Chatterjee, K.: TestCloudIDS dataset, (2024). [Online]. Available: https:\/\/doi.org\/10.21227\/xk1x-zt89","DOI":"10.21227\/xk1x-zt89"},{"key":"5549_CR75","unstructured":"Letteri, I., Della Penna, G., Vita, L.D., Grifa, M.T.: Mta-kdd\u201919: A dataset for malware traffic detection, in Proceedings of the Fourth Italian Conference on Cyber Security, Ancona, Italy, February 4th to 7th, 2020, ser. CEUR Workshop Proceedings, M.\u00a0Loreti and L.\u00a0Spalazzi, Eds., vol. 2597. CEUR-WS.org, pp. 153\u2013165 (2020)"},{"key":"5549_CR76","first-page":"57","volume-title":"International Conference on Machine Learning, Optimization, and Data Science","author":"I Letteri","year":"2021","unstructured":"Letteri, I., Di Cecco, A., Della Penna, G.: New optimization approaches in malware traffic analysis. In: International Conference on Machine Learning, Optimization, and Data Science, pp. 57\u201368. Springer International Publishing, Cham (2021)"},{"key":"5549_CR77","doi-asserted-by":"crossref","DOI":"10.1016\/j.pmcj.2021.101336","volume":"72","author":"SK Sasidharan","year":"2021","unstructured":"Sasidharan, S.K., Thomas, C.: Prodroid-an android malware detection framework based on profile hidden markov model. Pervasive Mob. Comput. 72, 101336 (2021)","journal-title":"Pervasive Mob. Comput."},{"key":"5549_CR78","doi-asserted-by":"crossref","first-page":"133","DOI":"10.1016\/j.inffus.2021.07.011","volume":"77","author":"Y Birman","year":"2022","unstructured":"Birman, Y., Hindi, S., Katz, G., Shabtai, A.: Cost-effective ensemble models selection using deep reinforcement learning. Inf. Fusion 77, 133\u2013148 (2022)","journal-title":"Inf. Fusion"},{"key":"5549_CR79","doi-asserted-by":"crossref","first-page":"376","DOI":"10.1016\/j.cose.2019.04.005","volume":"84","author":"J Zhang","year":"2019","unstructured":"Zhang, J., Qin, Z., Yin, H., Ou, L., Zhang, K.: A feature-hybrid malware variants detection using cnn based opcode embedding and bpnn based api embedding. Comput. Secur. 84, 376\u2013392 (2019)","journal-title":"Comput. Secur."}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05549-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-025-05549-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05549-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,11]],"date-time":"2025-11-11T15:19:25Z","timestamp":1762874365000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-025-05549-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,22]]},"references-count":79,"journal-issue":{"issue":"13","published-print":{"date-parts":[[2025,11]]}},"alternative-id":["5549"],"URL":"https:\/\/doi.org\/10.1007\/s10586-025-05549-w","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,22]]},"assertion":[{"value":"4 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 May 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 June 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 September 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"874"}}