{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T12:00:13Z","timestamp":1784894413138,"version":"3.55.0"},"reference-count":34,"publisher":"Springer Science and Business Media LLC","issue":"15-16","license":[{"start":{"date-parts":[[2019,12,16]],"date-time":"2019-12-16T00:00:00Z","timestamp":1576454400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,12,16]],"date-time":"2019-12-16T00:00:00Z","timestamp":1576454400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Multimed Tools Appl"],"published-print":{"date-parts":[[2020,4]]},"DOI":"10.1007\/s11042-019-08310-9","type":"journal-article","created":{"date-parts":[[2019,12,16]],"date-time":"2019-12-16T01:02:15Z","timestamp":1576458135000},"page":"10975-10993","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":29,"title":["Malware visualization methods based on deep convolution neural networks"],"prefix":"10.1007","volume":"79","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9108-7743","authenticated-orcid":false,"given":"Zhuojun","family":"Ren","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guang","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenke","family":"Lu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,12,16]]},"reference":[{"key":"8310_CR1","unstructured":"AERAsec (n.d.), Decompression bomb vulnerabilities. www.aerasec.de\/security\/advisories\/decompression-bomb-vulnerability.html. Accessed 2018 May 1"},{"issue":"3","key":"8310_CR2","doi-asserted-by":"publisher","first-page":"350","DOI":"10.1016\/j.cad.2007.11.007","volume":"40","author":"W Anotaipaiboon","year":"2008","unstructured":"Anotaipaiboon W, Makhanov SS (2008) Curvilinear space filling curves for five-axis machining. Comput Aided Des 40(3):350\u2013367. https:\/\/doi.org\/10.1016\/j.cad.2007.11.007","journal-title":"Comput Aided Des"},{"issue":"1","key":"8310_CR3","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1007\/s11416-006-0012-2","volume":"2","author":"U Bayer","year":"2006","unstructured":"Bayer U, Moser A, Kruegel C et al (2006) Dynamic analysis of malicious code. J Comput Virol 2(1):67\u201377. https:\/\/doi.org\/10.1007\/s11416-006-0012-2","journal-title":"J Comput Virol"},{"issue":"4","key":"8310_CR4","doi-asserted-by":"publisher","first-page":"37","DOI":"10.3390\/systems4040037","volume":"4","author":"G Boeing","year":"2016","unstructured":"Boeing G (2016) Visual analysis of nonlinear dynamical systems: chaos, fractals, self-similarity and the limits of prediction. Systems 4(4):37. https:\/\/doi.org\/10.3390\/systems4040037","journal-title":"Systems"},{"key":"8310_CR5","doi-asserted-by":"publisher","unstructured":"B\u00f6hm C, Klump G, Kriegel HP (1999) XZ-ordering: a space filling curve for objects with spatial extension. In: 6th International Symposium on Spatial Databases, pp 75\u201390. https:\/\/doi.org\/10.1007\/3-540-48482-5_7","DOI":"10.1007\/3-540-48482-5_7"},{"key":"8310_CR6","unstructured":"Chandrasekar K, Cleary G, Cox O et al (2017) Internet security threat report. Symantec Corp 22:38 https:\/\/www.symantec.com\/about\/newsroom\/press-kits\/istr-22. Accessed 2018 May 1"},{"key":"8310_CR7","doi-asserted-by":"publisher","unstructured":"Chiang WL, Lee MC, Lin CJ (2016) Parallel dual coordinate descent method for large-scale linear classification in multi-core environments. In: 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp 1485\u20131494. https:\/\/doi.org\/10.1145\/2939672.2939826","DOI":"10.1145\/2939672.2939826"},{"key":"8310_CR8","doi-asserted-by":"publisher","unstructured":"Chollet F (2017) Xception: deep learning with depthwise separable convolutions. In: 2017 IEEE Conference on Computer Vision and Pattern Recognition, pp 1800\u20131807. https:\/\/doi.org\/10.1109\/CVPR.2017.195","DOI":"10.1109\/CVPR.2017.195"},{"key":"8310_CR9","doi-asserted-by":"publisher","unstructured":"Conti G, Dean E, Sinda M et al (2008) Visual reverse engineering of binary and data files. In: 5th International Workshop on Visualization for Computer Security, pp 1\u201317. https:\/\/doi.org\/10.1007\/978-3-540-85933-8_1","DOI":"10.1007\/978-3-540-85933-8_1"},{"issue":"3","key":"8310_CR10","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1007\/BF00994018","volume":"20","author":"C Cortes","year":"1995","unstructured":"Cortes C, Vapnik V (1995) Support-vector networks. Mach Learn 20(3):273\u2013297. https:\/\/doi.org\/10.1007\/BF00994018","journal-title":"Mach Learn"},{"key":"8310_CR11","doi-asserted-by":"publisher","unstructured":"Douze M, J\u00e9gou H, Sandhawalia H et al (2009) Evaluation of GIST descriptors for web-scale image search. In: ACM International Conference on Image and Video Retrieval, pp 1\u20138. https:\/\/doi.org\/10.1145\/1646396.1646421","DOI":"10.1145\/1646396.1646421"},{"issue":"10","key":"8310_CR12","doi-asserted-by":"publisher","first-page":"1381","DOI":"10.1109\/32.6184","volume":"14","author":"C Faloutsos","year":"1988","unstructured":"Faloutsos C (1988) Gray codes for partial match and range queries. IEEE Trans Softw Eng 14(10):1381\u20131393. https:\/\/doi.org\/10.1109\/32.6184","journal-title":"IEEE Trans Softw Eng"},{"key":"8310_CR13","doi-asserted-by":"publisher","unstructured":"Gove R, Saxe J, Gold S et al (2014) SEEM: a scalable visualization for comparing multiple large sets of attributes for malware analysis. In: ACM 11th Workshop on Visualization for Cyber Security, pp 72\u201379. https:\/\/doi.org\/10.1145\/2671491.2671496","DOI":"10.1145\/2671491.2671496"},{"issue":"1","key":"8310_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10207-014-0242-0","volume":"14","author":"KS Han","year":"2015","unstructured":"Han KS, Lim JH, Kang B, Im EG (2015) Malware analysis using visualized images and entropy graphs. Int J Inf Secur 14(1):1\u201314. https:\/\/doi.org\/10.1007\/s10207-014-0242-0","journal-title":"Int J Inf Secur"},{"key":"8310_CR15","doi-asserted-by":"publisher","unstructured":"He K, Zhang X, Ren S et al (2016) Deep residual learning for image recognition. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition, pp 770\u2013778. https:\/\/doi.org\/10.1109\/CVPR.2016.90","DOI":"10.1109\/CVPR.2016.90"},{"key":"8310_CR16","doi-asserted-by":"publisher","unstructured":"LeCun Y, Kavukcuoglu K, Farabet C (2010) Convolutional networks and applications in vision. In: 2010 IEEE International Symposium on Circuits and Systems, pp 1\u20134. https:\/\/doi.org\/10.1109\/ISCAS.2010.5537907","DOI":"10.1109\/ISCAS.2010.5537907"},{"issue":"2","key":"8310_CR17","doi-asserted-by":"publisher","first-page":"253","DOI":"10.1007\/s11042-011-0907-x","volume":"68","author":"DH Lee","year":"2014","unstructured":"Lee DH, Kim KJ (2014) A study on malicious codes pattern analysis using visualization. Multimed Tools Appl 68(2):253\u2013263. https:\/\/doi.org\/10.1007\/s11042-011-0907-x","journal-title":"Multimed Tools Appl"},{"key":"8310_CR18","doi-asserted-by":"publisher","unstructured":"Liao S, Lopez MA, Leutenegger ST (2001) High dimensional similarity search with space filling curves. In: IEEE 17th International Conference on Data Engineering, pp 615\u2013622. https:\/\/doi.org\/10.1109\/ICDE.2001.914876","DOI":"10.1109\/ICDE.2001.914876"},{"issue":"3","key":"8310_CR19","doi-asserted-by":"publisher","first-page":"217","DOI":"10.1007\/s10619-010-7070-7","volume":"29","author":"MF Mokbel","year":"2011","unstructured":"Mokbel MF, Aref WG (2011) Irregularity in high-dimensional space filling curves. Distrib Parallel Database 29(3):217\u2013238. https:\/\/doi.org\/10.1007\/s10619-010-7070-7","journal-title":"Distrib Parallel Database"},{"key":"8310_CR20","doi-asserted-by":"publisher","unstructured":"Nataraj L, Karthikeyan S, Jacob G et al (2011) Malware images: visualization and automatic classification. In: ACM 8th International Symposium on Visualization for Cyber Security, pp 1\u20137. https:\/\/doi.org\/10.1145\/2016904.2016908","DOI":"10.1145\/2016904.2016908"},{"key":"8310_CR21","doi-asserted-by":"publisher","unstructured":"Niedermeier R, Reinhardt K, Sanders P (1997) Towards optimal locality in mesh-Indexings. In: International Symposium on Fundamentals of Computation Theory, pp 364\u2013375. https:\/\/doi.org\/10.1007\/BFb0036198","DOI":"10.1007\/BFb0036198"},{"key":"8310_CR22","doi-asserted-by":"publisher","unstructured":"Panas T (2008) Signature visualization of software binaries. In: 4th ACM symposium on Software visualization, pp 185\u2013188. https:\/\/doi.org\/10.1145\/1409720.1409749","DOI":"10.1145\/1409720.1409749"},{"key":"8310_CR23","doi-asserted-by":"publisher","unstructured":"Quist DA, Liebrock LM (2009) Visualizing compiled executables for malware analysis. In: IEEE 6th International Workshop on Visualization for Cyber Security, pp 27\u201332. https:\/\/doi.org\/10.1109\/vizsec.2009.5375539","DOI":"10.1109\/vizsec.2009.5375539"},{"key":"8310_CR24","doi-asserted-by":"publisher","unstructured":"Saxe J, Mentis D, Greamo C (2012) Visualization of shared system call sequence relationships in large malware corpora. In: ACM International Symposium on Visualization for Cyber Security, pp 33\u201340. https:\/\/doi.org\/10.1145\/2379690.2379695","DOI":"10.1145\/2379690.2379695"},{"issue":"6","key":"8310_CR25","doi-asserted-by":"publisher","first-page":"1791","DOI":"10.1109\/TIP.2015.2409571","volume":"24","author":"G Schrack","year":"2015","unstructured":"Schrack G, Stocco L (2015) Generation of spatial orders and space filling curves. IEEE Trans Image Process 24(6):1791\u20131800. https:\/\/doi.org\/10.1109\/TIP.2015.2409571","journal-title":"IEEE Trans Image Process"},{"key":"8310_CR26","doi-asserted-by":"publisher","unstructured":"Simard PY, Steinkraus D, Platt JC (2003) Best practices for convolutional neural networks applied to visual document analysis. In: 7th International Conference on Document Analysis and Recognition, pp 1\u20136. https:\/\/doi.org\/10.1109\/ICDAR.2003.1227801","DOI":"10.1109\/ICDAR.2003.1227801"},{"key":"8310_CR27","unstructured":"Simonyan K, Zisserman A (2015) Very deep convolutional networks for large-scale image recognition. In: International Conference on Learning Representations, pp 1\u201314. https:\/\/arxiv.org\/abs\/1409.1556. Accessed 2018 May 1"},{"issue":"13","key":"8310_CR28","doi-asserted-by":"publisher","first-page":"1768","DOI":"10.1016\/j.patrec.2008.05.002","volume":"29","author":"VV Strelkov","year":"2008","unstructured":"Strelkov VV (2008) A new similarity measure for histogram comparison and its application in time series analysis. Pattern Recogn Lett 29(13):1768\u20131774. https:\/\/doi.org\/10.1016\/j.patrec.2008.05.002","journal-title":"Pattern Recogn Lett"},{"key":"8310_CR29","doi-asserted-by":"publisher","unstructured":"Szegedy C, Vanhoucke V, Ioffe S et al (2016) Rethinking the inception architecture for computer vision. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition, pp 2818\u20132826. https:\/\/doi.org\/10.1109\/CVPR.2016.308","DOI":"10.1109\/CVPR.2016.308"},{"key":"8310_CR30","doi-asserted-by":"publisher","unstructured":"Trinius P, Holz T, G\u00f6bel J et al (2009) Visual analysis of malware behavior using treemaps and thread graphs. In: IEEE 6th International Workshop on Visualization for Cyber Security, pp 33\u201338. https:\/\/doi.org\/10.1109\/vizsec.2009.5375540","DOI":"10.1109\/vizsec.2009.5375540"},{"issue":"2","key":"8310_CR31","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1109\/MSP.2007.45","volume":"5","author":"C Willems","year":"2007","unstructured":"Willems C, Holz T, Freiling F (2007) Toward automated dynamic malware analysis using CWSandbox. IEEE Secur Priv 5(2):32\u201339. https:\/\/doi.org\/10.1109\/MSP.2007.45","journal-title":"IEEE Secur Priv"},{"key":"8310_CR32","doi-asserted-by":"publisher","unstructured":"Yee CL, Chuan LL, Ismail M et al (2012) A static and dynamic visual debugger for malware analysis. In: 18th Asia-Pacific Conference on Communications, pp 765\u2013769. https:\/\/doi.org\/10.1109\/APCC.2012.6388211","DOI":"10.1109\/APCC.2012.6388211"},{"key":"8310_CR33","doi-asserted-by":"publisher","unstructured":"Yoo IS (2004) Visualizing windows executable viruses using self-organizing maps. In: ACM Workshop on Visualization and Data Mining for Computer Security, pp 82\u201389. https:\/\/doi.org\/10.1145\/1029208.1029222","DOI":"10.1145\/1029208.1029222"},{"key":"8310_CR34","doi-asserted-by":"publisher","unstructured":"Zhuo W, Nadjin Y (2012) MalwareVis: entity-based visualization of malware network traces. In: 9th International Symposium on Visualization for Cyber Security, pp 41\u201347. https:\/\/doi.org\/10.1145\/2379690.2379696","DOI":"10.1145\/2379690.2379696"}],"container-title":["Multimedia Tools and Applications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-019-08310-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11042-019-08310-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-019-08310-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,12,15]],"date-time":"2020-12-15T00:35:40Z","timestamp":1607992540000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11042-019-08310-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,16]]},"references-count":34,"journal-issue":{"issue":"15-16","published-print":{"date-parts":[[2020,4]]}},"alternative-id":["8310"],"URL":"https:\/\/doi.org\/10.1007\/s11042-019-08310-9","relation":{},"ISSN":["1380-7501","1573-7721"],"issn-type":[{"value":"1380-7501","type":"print"},{"value":"1573-7721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,12,16]]},"assertion":[{"value":"1 May 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 April 2019","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 October 2019","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 December 2019","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}