{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T02:45:30Z","timestamp":1782614730749,"version":"3.54.5"},"reference-count":121,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T00:00:00Z","timestamp":1782604800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T00:00:00Z","timestamp":1782604800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Slovak Technical University"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>\n                    Ontologies are a standard tool for creating semantic schemata in many knowledge intensive domains of human interest. They are becoming increasingly important also in the areas that have been until very recently dominated by subsymbolic knowledge representation and machine-learning-based data processing. One such area is information security, and specifically,\n                    <jats:italic>malware detection<\/jats:italic>\n                    . We thus propose\n                    <jats:italic>PE Malware Ontology<\/jats:italic>\n                    that offers a reusable semantic schema for Portable Executable (PE \u2013 the Windows binary format) malware files. This ontology is inspired by the structure of the dataset Elastic Malware Benchmark for Empowering Researchers (EMBER), which focuses on the static malware analysis of PE files. With this proposal, we hope to provide a unified semantic representation for the existing and future PE-malware datasets and facilitate the application of symbolic, neuro-symbolic, or otherwise explainable approaches in the PE-malware detection domain, which may produce interpretable results described by the terms defined in our ontology. In addition, we also publish semantically treated EMBER data, including fractional datasets, to support the reproducibility of experiments on EMBER. We supplement our work with a preliminary case study, conducted using concept learning, to show the general feasibility of our approach. While we were not able to match the precision of the state-of-the-art machine learning tools, the learned malware discriminators were interesting and highly interpretable.\n                  <\/jats:p>","DOI":"10.1007\/s11416-026-00635-y","type":"journal-article","created":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T02:30:08Z","timestamp":1782613808000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Semantic data representation for explainable windows malware detection models"],"prefix":"10.1007","volume":"22","author":[{"given":"Peter","family":"\u0160vec","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"\u0160tefan","family":"Balogh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Martin","family":"Homola","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"J\u00e1n","family":"Kl\u2019uka","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tom\u00e1\u0161","family":"Bist\u00e1k","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Anthony","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,28]]},"reference":[{"key":"635_CR1","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1016\/j.cose.2018.11.001","volume":"81","author":"D Ucci","year":"2019","unstructured":"Ucci, D., Aniello, L., Baldoni, R.: Survey of machine learning techniques for malware analysis. Comput. Secur. 81, 123\u2013147 (2019). https:\/\/doi.org\/10.1016\/j.cose.2018.11.001","journal-title":"Comput. Secur."},{"key":"635_CR2","doi-asserted-by":"publisher","unstructured":"Pramanik, S., Teja, H.: Ember\u2014analysis of malware dataset using convolutional neural networks. In: 2019 Third International Conference on Inventive Systems and Control (ICISC), pp. 286\u2013291 (2019). https:\/\/doi.org\/10.1109\/ICISC44355.2019.9036424","DOI":"10.1109\/ICISC44355.2019.9036424"},{"key":"635_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102526","volume":"153","author":"D Gibert","year":"2020","unstructured":"Gibert, D., Mateu, C., Planes, J.: The rise of machine learning for detection and classification of malware: research developments, trends and challenges. J. Netw. Comput. Appl. 153, 102526 (2020)","journal-title":"J. Netw. Comput. Appl."},{"key":"635_CR4","doi-asserted-by":"publisher","first-page":"222310","DOI":"10.1109\/ACCESS.2020.3041951","volume":"8","author":"K Shaukat","year":"2020","unstructured":"Shaukat, K., Luo, S., Varadharajan, V., Hameed, I.A., Xu, M.: A survey on machine learning techniques for cyber security in the last decade. IEEE Access 8, 222310\u2013222354 (2020)","journal-title":"IEEE Access"},{"key":"635_CR5","doi-asserted-by":"publisher","unstructured":"Supriya, Y., Kumar, G., Sowjanya, D., Yadav, D., Kameshwari, D.L.: Malware detection techniques: a survey. In: 2020 Sixth International Conference on Parallel, Distributed and Grid Computing (PDGC), pp. 25\u201330 (2020). https:\/\/doi.org\/10.1109\/PDGC50313.2020.9315764","DOI":"10.1109\/PDGC50313.2020.9315764"},{"key":"635_CR6","doi-asserted-by":"publisher","DOI":"10.1016\/J.SYSARC.2020.101861","volume":"112","author":"J Singh","year":"2021","unstructured":"Singh, J., Singh, J.: A survey on machine learning-based malware detection in executable files. J. Syst. Archit. 112, 101861 (2021). https:\/\/doi.org\/10.1016\/J.SYSARC.2020.101861","journal-title":"J. Syst. Archit."},{"key":"635_CR7","doi-asserted-by":"publisher","unstructured":"Raff, E., Fleshman, W., Zak, R., Anderson, H.S., Filar, B., McLean, M.: Classifying sequences of extreme length with constant memory applied to malware detection. In: Thirty-Fifth AAAI Conference on Artificial Intelligence, AAAI 2021, Thirty-Third Conference on Innovative Applications of Artificial Intelligence, IAAI 2021, The Eleventh Symposium on Educational Advances in Artificial Intelligence, EAAI 2021, Virtual Event, February 2\u20139, 2021, pp. 9386\u20139394. AAAI Press (2021). https:\/\/doi.org\/10.1609\/AAAI.V35I11.17131","DOI":"10.1609\/AAAI.V35I11.17131"},{"key":"635_CR8","doi-asserted-by":"publisher","unstructured":"Aggarwal, P., Ahamed, S.F., Shetty, S., Freeman, L.J.: Selective targeted transfer learning for malware classification. In: 2021 Third IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA), pp. 114\u2013120 (2021). https:\/\/doi.org\/10.1109\/TPSISA52974.2021.00013","DOI":"10.1109\/TPSISA52974.2021.00013"},{"issue":"4","key":"635_CR9","doi-asserted-by":"publisher","first-page":"800","DOI":"10.3390\/JCP2040041","volume":"2","author":"U Tayyab","year":"2022","unstructured":"Tayyab, U., Khan, F.B., Durad, M.H., Khan, A., Lee, Y.S.: A survey of the recent trends in deep learning based malware detection. J. Cybersecur. Priv. 2(4), 800\u2013829 (2022). https:\/\/doi.org\/10.3390\/JCP2040041","journal-title":"J. Cybersecur. Priv."},{"key":"635_CR10","doi-asserted-by":"publisher","unstructured":"Amich, A., Eshete, B.: Explanation-guided diagnosis of machine learning evasion attacks. In: Garc\u00eda-Alfaro, J., Li, S., Poovendran, R., Debar, H., Yung, M. (eds.) Security and Privacy in Communication Networks\u201417th EAI International Conference, SecureComm 2021, Virtual Event, September 6\u20139, 2021, Proceedings, Part I, Vol. 398 of LNICST, pp. 207\u2013228. Springer (2021). https:\/\/doi.org\/10.1007\/978-3-030-90019-9_11","DOI":"10.1007\/978-3-030-90019-9_11"},{"key":"635_CR11","doi-asserted-by":"publisher","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: Why should I trust you?: explaining the predictions of any classifier. In: Krishnapuram, B., Shah, M., Smola, A.J., Aggarwal, C.C., Shen, D., Rastogi, R. (eds.) Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, San Francisco, CA, USA, August 13\u201317, 2016, pp. 1135\u20131144. ACM (2016). https:\/\/doi.org\/10.1145\/2939672.2939778","DOI":"10.1145\/2939672.2939778"},{"key":"635_CR12","unstructured":"Lundberg, S.M., Lee, S.: A unified approach to interpreting model predictions. In: Guyon, I., von Luxburg, U., Bengio, S., Wallach, H.M., Fergus, R., Vishwanathan, S.V.N., Garnett, R. (eds.). Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017, December 4\u20139, 2017, Long Beach, CA, USA, pp. 4765\u20134774 (2017)"},{"key":"635_CR13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102198","volume":"105","author":"G Iadarola","year":"2021","unstructured":"Iadarola, G., Martinelli, F., Mercaldo, F., Santone, A.: Towards an interpretable deep learning model for mobile malware detection and family identification. Comput. Secur. 105, 102198 (2021). https:\/\/doi.org\/10.1016\/j.cose.2021.102198","journal-title":"Comput. Secur."},{"key":"635_CR14","doi-asserted-by":"publisher","unstructured":"Marais, B., Quertier, T., Chesneau, C.: Malware analysis with artificial intelligence and a particular attention on results interpretability. In: Matsui, K., Omatu, S., Yigitcanlar, T., Rodr\u00edguez-Gonz\u00e1lez, S. (eds.) Distributed Computing and Artificial Intelligence, Volume 1: 18th International Conference, DCAI 2021, Salamanca, Spain, 6\u20138 October 2021, Vol. 327 of LNNS, pp. 43\u201355. Springer (2021). https:\/\/doi.org\/10.1007\/978-3-030-86261-9_5","DOI":"10.1007\/978-3-030-86261-9_5"},{"key":"635_CR15","doi-asserted-by":"crossref","unstructured":"Mills, A., Spyridopoulos, T., Legg, P.: Efficient and interpretable real-time malware detection using random-forest. In: 2019 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (Cyber SA). pp. 1\u20138. IEEE (2019)","DOI":"10.1109\/CyberSA.2019.8899533"},{"key":"635_CR16","doi-asserted-by":"publisher","unstructured":"Dolej\u0161, J., Jure\u010dek, M.: Interpretability of machine learning-based results of malware detection using a set of rules. In: Stamp, M., Aaron\u00a0Visaggio, C., Mercaldo, F., Di\u00a0Troia, F. (eds.), Artificial Intelligence for Cybersecurity, pp. 107\u2013136. Springer International Publishing, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-030-97087-1_5","DOI":"10.1007\/978-3-030-97087-1_5"},{"key":"635_CR17","doi-asserted-by":"crossref","unstructured":"\u0160vec, P., Balogh, V., Homola, M.: Experimental evaluation of description logic concept learning algorithms for static malware detection. In: ICISSP, pp. 792\u2013799 (2021)","DOI":"10.5220\/0010429707920799"},{"issue":"2","key":"635_CR18","first-page":"231","volume":"10","author":"P Westphal","year":"2019","unstructured":"Westphal, P., B\u00fchmann, L., Bin, S., Jabeen, H., Lehmann, J.: SML-Bench-A benchmarking framework for structured machine learning. Semant. Web 10(2), 231\u2013245 (2019)","journal-title":"Semant. Web"},{"key":"635_CR19","unstructured":"Wissner-Gross, A.: Datasets over algorithms, In Edge.com, Retrieved Jan, 2024. [Online]. https:\/\/www.edge.org\/response-detail\/26587 (2016)"},{"key":"635_CR20","unstructured":"Anderson, H.S., Roth, P.: EMBER: an open dataset for training static PE malware machine learning models. arXiv:1804.04637 (2018)"},{"key":"635_CR21","unstructured":"Harang, R., Rudd, E.M.: SOREL-20M: a large scale benchmark dataset for malicious PE detection. arXiv:2012.07634 (2020)"},{"key":"635_CR22","doi-asserted-by":"crossref","unstructured":"Yang, L., Ciptadi, A., Laziuk, I., Ahmadzadeh, A., Wang, G.: Bodmas: an open dataset for learning based temporal analysis of pe malware. In: 2021 IEEE Security and Privacy Workshops (SPW), pp. 78\u201384. IEEE (2021)","DOI":"10.1109\/SPW53761.2021.00020"},{"key":"635_CR23","unstructured":"Sikorski, M., Honig, A.: Practical malware analysis: the hands-on guide to dissecting malicious software, no starch press (2012)"},{"issue":"4","key":"635_CR24","doi-asserted-by":"publisher","first-page":"71:1","DOI":"10.1145\/3447772","volume":"54","author":"A Hogan","year":"2022","unstructured":"Hogan, A., Blomqvist, E., Cochez, M., d\u2019Amato, C., de Melo, G., Gutierrez, C., Kirrane, S., Gayo, J.E.L., Navigli, R., Neumaier, S., Ngomo, A.N., Polleres, A., Rashid, S.M., Rula, A., Schmelzeisen, L., Sequeda, J.F., Staab, S., Zimmermann, A.: Knowledge graphs. ACM Comput. Surv. 54(4), 71:1-71:37 (2022)","journal-title":"ACM Comput. Surv."},{"key":"635_CR25","doi-asserted-by":"publisher","unstructured":"Hitzler, P., Sarker, M.K. (eds.): Neuro-Symbolic Artificial Intelligence: The State of the Art. Frontiers in Artificial Intelligence and Applications, vol. 342. IOS Press (2021). https:\/\/doi.org\/10.3233\/FAIA342","DOI":"10.3233\/FAIA342"},{"key":"635_CR26","first-page":"1","volume-title":"Handbook on Ontologies, International Handbooks on Information Systems","author":"N Guarino","year":"2009","unstructured":"Guarino, N., Oberle, D., Staab, S.: What is an ontology? In: Staab, S., Studer, R. (eds.) Handbook on Ontologies, International Handbooks on Information Systems, pp. 1\u201317. Springer (2009)"},{"key":"635_CR27","doi-asserted-by":"publisher","first-page":"671","DOI":"10.1613\/JAIR.4017","volume":"48","author":"I Androutsopoulos","year":"2013","unstructured":"Androutsopoulos, I., Lampouras, G., Galanis, D.: Generating natural language descriptions from OWL ontologies: the naturalowl system. J. Artif. Intell. Res. 48, 671\u2013715 (2013). https:\/\/doi.org\/10.1613\/JAIR.4017","journal-title":"J. Artif. Intell. Res."},{"key":"635_CR28","unstructured":"Cimiano, P., L\u00fcker, J., Nagel, D., Unger, C.: Exploiting ontology lexica for generating natural language texts from RDF data. In: Gatt, A., Saggion, H. (eds.) ENLG 2013\u2014Proceedings of the 14th European Workshop on Natural Language Generation, August 8-9, 2013, Sofia, Bulgaria, The Association for Computer Linguistics, pp. 10\u201319 (2013)"},{"key":"635_CR29","doi-asserted-by":"crossref","unstructured":"Galanis, D., Androutsopoulos, I.: Generating multilingual descriptions from linguistically annotated OWL ontologies: the naturalowl system. In: Busemann, S. (ed.) Proceedings of the Eleventh European Workshop on Natural Language Generation, ENLG 2007, Schloss Dagstuhl, Germany, June 17\u201320, 2007 (2007)","DOI":"10.3115\/1610163.1610188"},{"key":"635_CR30","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-319-98842-9_1","volume-title":"AI in Cybersecurity","author":"LF Sikos","year":"2019","unstructured":"Sikos, L.F.: Owl ontologies in cybersecurity: conceptual modeling of cyber-knowledge. In: Sikos, L.F. (ed.) AI in Cybersecurity, pp. 1\u201317. Springer International Publishing, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-319-98842-9_1"},{"key":"635_CR31","doi-asserted-by":"publisher","unstructured":"Xia, X., Ding, Y., Jiang, J., Zeng, R.: Malware detection based on ontology. In: 2017 International Conference on Machine Learning and Cybernetics, ICMLC 2017, Ningbo, China, July 9\u201312, 2017, pp. 21\u201326. IEEE (2017). https:\/\/doi.org\/10.1109\/ICMLC.2017.8107737","DOI":"10.1109\/ICMLC.2017.8107737"},{"key":"635_CR32","doi-asserted-by":"publisher","DOI":"10.1016\/J.COSE.2019.101574","volume":"87","author":"Y Ding","year":"2019","unstructured":"Ding, Y., Wu, R., Zhang, X.: Ontology-based knowledge representation for malware individuals and families. Comput. Secur. 87, 101574 (2019). https:\/\/doi.org\/10.1016\/J.COSE.2019.101574","journal-title":"Comput. Secur."},{"key":"635_CR33","doi-asserted-by":"publisher","first-page":"2639","DOI":"10.5555\/1577069.1755874","volume":"10","author":"J Lehmann","year":"2009","unstructured":"Lehmann, J.: DL-learner: learning concepts in description logics. J. Mach. Learn. Res. 10, 2639\u20132642 (2009). https:\/\/doi.org\/10.5555\/1577069.1755874","journal-title":"J. Mach. Learn. Res."},{"key":"635_CR34","doi-asserted-by":"publisher","unstructured":"Hocquette, C., Niskanen, A., J\u00e4rvisalo, M., Cropper, A.: Learning MDL logic programs from noisy data. In: Wooldridge, M.J., Dy, J.G., Natarajan, S. (eds.) Thirty-Eighth AAAI Conference on Artificial Intelligence, AAAI 2024, Thirty-Sixth Conference on Innovative Applications of Artificial Intelligence, IAAI 2024, Fourteenth Symposium on Educational Advances in Artificial Intelligence, EAAI 2014, February 20\u201327, 2024, pp. 10553\u201310561. AAAI Press, Vancouver, Canada (2024). https:\/\/doi.org\/10.1609\/AAAI.V38I9.28925","DOI":"10.1609\/AAAI.V38I9.28925"},{"issue":"20","key":"635_CR35","doi-asserted-by":"publisher","first-page":"629","DOI":"10.1016\/0743-1066(94)90035-3","volume":"19","author":"SH Muggleton","year":"1994","unstructured":"Muggleton, S.H., Raedt, L.D.: Inductive logic programming: theory and methods. J. Log. Program. 19(20), 629\u2013679 (1994). https:\/\/doi.org\/10.1016\/0743-1066(94)90035-3","journal-title":"J. Log. Program."},{"key":"635_CR36","unstructured":"Bordes, A., Usunier, N., Garc\u00eda-Dur\u00e1n, A., Weston, J., Yakhnenko, O.: Translating embeddings for modeling multi-relational data. In: Advances in Neural Information Processing Systems 26: 27th Annual Conference on Neural Information Processing Systems 2013. Proceedings of a meeting held December 5\u20138, 2013, Lake Tahoe, Nevada, United States, pp. 2787\u20132795 (2013)"},{"key":"635_CR37","doi-asserted-by":"crossref","unstructured":"de Sousa Ribeiro, M., Leite, J.: Aligning artificial neural networks and ontologies towards explainable AI. In: Thirty-Fifth AAAI Conference on Artificial Intelligence, AAAI 2021, Thirty-Third Conference on Innovative Applications of Artificial Intelligence, IAAI 2021, The Eleventh Symposium on Educational Advances in Artificial Intelligence, EAAI 2021, Virtual Event, February 2\u20139, 2021, pp. 4932\u20134940. AAAI Press (2021)","DOI":"10.1609\/aaai.v35i6.16626"},{"key":"635_CR38","doi-asserted-by":"publisher","first-page":"46717","DOI":"10.1109\/ACCESS.2019.2906934","volume":"7","author":"R Vinayakumar","year":"2019","unstructured":"Vinayakumar, R., Alazab, M., Soman, K.P., Poornachandran, P., Venkatraman, S.: Robust intelligent malware detection using deep learning. IEEE Access 7, 46717\u201346738 (2019). https:\/\/doi.org\/10.1109\/ACCESS.2019.2906934","journal-title":"IEEE Access"},{"key":"635_CR39","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101682","volume":"89","author":"X Liu","year":"2020","unstructured":"Liu, X., Lin, Y., Li, H., Zhang, J.: A novel method for malware detection on ml-based visualization technique. Comput. Secur. 89, 101682 (2020). https:\/\/doi.org\/10.1016\/j.cose.2019.101682","journal-title":"Comput. Secur."},{"issue":"4","key":"635_CR40","doi-asserted-by":"publisher","first-page":"419","DOI":"10.1049\/iet-ifs.2019.0189","volume":"14","author":"L Ghouti","year":"2020","unstructured":"Ghouti, L., Imam, M.: Malware classification using compact image features and multiclass support vector machines. IET Inf. Secur. 14(4), 419\u2013429 (2020). https:\/\/doi.org\/10.1049\/iet-ifs.2019.0189","journal-title":"IET Inf. Secur."},{"key":"635_CR41","unstructured":"MITRE Corp.: Malware attribute enumeration and characterization [Online]. https:\/\/maecproject.github.io\/ (2020). Accessed 15 May 2022"},{"key":"635_CR42","unstructured":"Stearns, M.Q., Price, C., Spackman, K.A., Wang, A.Y.: SNOMED clinical terms: overview of the development process and project status. In: AMIA 2001, American Medical Informatics Association Annual Symposium, Washington, DC, USA, November 3\u20137, 2001, AMIA (2001)"},{"issue":"3","key":"635_CR43","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1093\/BIB\/BBL027","volume":"7","author":"O Bodenreider","year":"2006","unstructured":"Bodenreider, O., Stevens, R.: Bio-ontologies: current trends and future directions. Brief. Bioinform. 7(3), 256\u2013274 (2006). https:\/\/doi.org\/10.1093\/BIB\/BBL027","journal-title":"Brief. Bioinform."},{"issue":"11","key":"635_CR44","doi-asserted-by":"publisher","first-page":"5158","DOI":"10.1016\/J.ESWA.2014.02.045","volume":"41","author":"M Ivanovic","year":"2014","unstructured":"Ivanovic, M., Budimac, Z.: An overview of ontologies and data resources in medical domains. Expert Syst. Appl. 41(11), 5158\u20135166 (2014). https:\/\/doi.org\/10.1016\/J.ESWA.2014.02.045","journal-title":"Expert Syst. Appl."},{"issue":"5","key":"635_CR45","doi-asserted-by":"publisher","first-page":"627","DOI":"10.3233\/SW-180293","volume":"9","author":"A Soylu","year":"2018","unstructured":"Soylu, A., Kharlamov, E., Zheleznyakov, D., Jim\u00e9nez-Ruiz, E., Giese, M., Skj\u00e6veland, M.G., Hovland, D., Schlatte, R., Brandt, S., Lie, H., Horrocks, I.: Optiquevqs: a visual query system over ontologies for industry. Semant. Web 9(5), 627\u2013660 (2018). https:\/\/doi.org\/10.3233\/SW-180293","journal-title":"Semant. Web"},{"key":"635_CR46","doi-asserted-by":"publisher","unstructured":"Hepp, M.: Goodrelations: an ontology for describing products and services offers on the web. In: Gangemi, A., Euzenat, J. (eds.) Knowledge Engineering: Practice and Patterns, 16th International Conference, EKAW 2008, Acitrezza, Italy, September 29\u2013October 2, 2008. Proceedings, Vol. 5268 of Lecture Notes in Computer Science, pp. 329\u2013346. Springer (2008). https:\/\/doi.org\/10.1007\/978-3-540-87696-0_29","DOI":"10.1007\/978-3-540-87696-0_29"},{"issue":"2","key":"635_CR47","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1016\/J.ENGAPPAI.2004.11.011","volume":"18","author":"VAM Tamma","year":"2005","unstructured":"Tamma, V.A.M., Phelps, S., Dickinson, I., Wooldridge, M.J.: Ontologies for supporting negotiation in e-commerce. Eng. Appl. Artif. Intell. 18(2), 223\u2013236 (2005). https:\/\/doi.org\/10.1016\/J.ENGAPPAI.2004.11.011","journal-title":"Eng. Appl. Artif. Intell."},{"issue":"2","key":"635_CR48","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1145\/2844544","volume":"59","author":"RV Guha","year":"2016","unstructured":"Guha, R.V., Brickley, D., Macbeth, S.: Schema.org: evolution of structured data on the web. Commun. ACM 59(2), 44\u201351 (2016). https:\/\/doi.org\/10.1145\/2844544","journal-title":"Commun. ACM"},{"issue":"2","key":"635_CR49","first-page":"67","volume":"9","author":"M Al-Yahya","year":"2015","unstructured":"Al-Yahya, M., George, R., Alfaries, A.: Ontologies in e-learning: review of the literature. Int. J. Softw. Eng. Appl. 9(2), 67\u201384 (2015)","journal-title":"Int. J. Softw. Eng. Appl."},{"key":"635_CR50","doi-asserted-by":"publisher","unstructured":"Homola, M., K\u013euka, J., Kubincov\u00e1, Z., Marmanov\u00e1, P., Cifra, M.: Timing the adaptive learning process with events ontology. In: Herzog, M.A., Kubincov\u00e1, Z., Han, P., Temperini, M. (eds.) Advances in Web-Based Learning\u2014ICWL 2019\u201418th International Conference, Magdeburg, Germany, September 23\u201325, 2019, Proceedings, Vol. 11841 of Lecture Notes in Computer Science, pp. 3\u201314. Springer (2019). https:\/\/doi.org\/10.1007\/978-3-030-35758-0_1","DOI":"10.1007\/978-3-030-35758-0_1"},{"key":"635_CR51","doi-asserted-by":"publisher","unstructured":"Homola, M., Kubincov\u00e1, Z., Urb\u00e1nek, R., K\u013euka, J.: Tracking the adaptive learning process with topics ontology. In: Xie, H., Lai, C., Chen, W., Xu, G., Popescu, E. (eds.) Advances in Web-Based Learning\u2014ICWL 2023\u201422nd International Conference, ICWL 2023, Sydney, NSW, Australia, November 26-28, 2023, Proceedings, Vol. 14409 of Lecture Notes in Computer Science, pp. 155\u2013165. Springer (2023). https:\/\/doi.org\/10.1007\/978-981-99-8385-8_13","DOI":"10.1007\/978-981-99-8385-8_13"},{"key":"635_CR52","unstructured":"Bromander, S., J\u00f8sang, A., Eian, M.: Semantic cyberthreat modelling. In: STIDS, pp. 74\u201378 (2016)"},{"key":"635_CR53","doi-asserted-by":"crossref","unstructured":"Mavroeidis, V., Bromander, S., Cyber threat intelligence model: An evaluation of taxonomies, sharing standards, and ontologies within cyber threat intelligence. In: 2017 European Intelligence and Security Informatics Conference (EISIC). pp. 91\u201398. IEEE (2017)","DOI":"10.1109\/EISIC.2017.20"},{"key":"635_CR54","unstructured":"Syed, Z., Padia, A., Finin, T., Mathews, L., Joshi, A.: Uco: a unified cybersecurity ontology. UMBC Student Collection (2016)"},{"key":"635_CR55","doi-asserted-by":"crossref","unstructured":"Ulicny, B.E., Moskal, J.J., Kokar, M.M., Abe, K., Smith, J.K.: Inference and ontologies. In: Cyber Defense and Situational Awareness, pp. 167\u2013199. Springer (2014)","DOI":"10.1007\/978-3-319-11391-3_9"},{"issue":"2","key":"635_CR56","doi-asserted-by":"publisher","first-page":"199","DOI":"10.1006\/knac.1993.1008","volume":"5","author":"TR Gruber","year":"1993","unstructured":"Gruber, T.R.: A translation approach to portable ontology specifications. Knowl. Acquis. 5(2), 199\u2013220 (1993)","journal-title":"Knowl. Acquis."},{"key":"635_CR57","unstructured":"Baader, F., Calvanese, D., McGuinness, D.L., Nardi, D., Patel-Schneider, P.F. (eds.): The Description Logic Handbook: Theory, Implementation, and Applications. Cambridge University Press (2003)"},{"issue":"1","key":"635_CR58","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1016\/J.WEBSEM.2003.07.001","volume":"1","author":"I Horrocks","year":"2003","unstructured":"Horrocks, I., Patel-Schneider, P.F., van Harmelen, F.: From SHIQ and RDF to OWL: the making of a web ontology language. J. Web Semant. 1(1), 7\u201326 (2003). https:\/\/doi.org\/10.1016\/J.WEBSEM.2003.07.001","journal-title":"J. Web Semant."},{"issue":"4","key":"635_CR59","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1016\/J.WEBSEM.2008.05.001","volume":"6","author":"BC Grau","year":"2008","unstructured":"Grau, B.C., Horrocks, I., Motik, B., Parsia, B., Patel-Schneider, P.F., Sattler, U.: OWL 2: the next step for OWL. J. Web Semant. 6(4), 309\u2013322 (2008). https:\/\/doi.org\/10.1016\/J.WEBSEM.2008.05.001","journal-title":"J. Web Semant."},{"key":"635_CR60","unstructured":"Peterson, D., Gao, S.S., Malhotra, A., Sperberg-McQueen, C.M., Thompson, H.S., Biron, P.V., Malhotra, A. (eds.) W3C XML schema definition language (XSD) 1.1 part 2: Datatypes, Technical report, W3C, W3C Recommendation (2012)"},{"issue":"3","key":"635_CR61","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1007\/S10817-014-9305-1","volume":"53","author":"B Glimm","year":"2014","unstructured":"Glimm, B., Horrocks, I., Motik, B., Stoilos, G., Wang, Z.: Hermit: an OWL 2 reasoner. J. Autom. Reason. 53(3), 245\u2013269 (2014). https:\/\/doi.org\/10.1007\/S10817-014-9305-1","journal-title":"J. Autom. Reason."},{"key":"635_CR62","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1016\/J.WEBSEM.2014.06.003","volume":"27\u201328","author":"A Steigmiller","year":"2014","unstructured":"Steigmiller, A., Liebig, T., Glimm, B.: Konclude: system description. J. Web Semant. 27\u201328, 78\u201385 (2014). https:\/\/doi.org\/10.1016\/J.WEBSEM.2014.06.003","journal-title":"J. Web Semant."},{"issue":"1","key":"635_CR63","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/S10817-013-9296-3","volume":"53","author":"Y Kazakov","year":"2014","unstructured":"Kazakov, Y., Kr\u00f6tzsch, M., Simancik, F.: The incredible ELK\u2014from polynomial procedures to efficient reasoning with $$\\cal{EL} $$ ontologies. J. Autom. Reason. 53(1), 1\u201361 (2014). https:\/\/doi.org\/10.1007\/S10817-013-9296-3","journal-title":"J. Autom. Reason."},{"key":"635_CR64","doi-asserted-by":"publisher","unstructured":"Musen, M.A.: Prot\u00e9g\u00e9 Team. The Prot\u00e9g\u00e9 project: a look back and a look forward. AI Matters 1(4), 4\u201312 (2015). https:\/\/doi.org\/10.1145\/2757001.2757003","DOI":"10.1145\/2757001.2757003"},{"key":"635_CR65","doi-asserted-by":"publisher","unstructured":"Stuckenschmidt, H., Parent, C., Spaccapietra, S. (eds.): Modular Ontologies: Concepts, Theories and Techniques for Knowledge Modularization. Lecture Notes in Computer Science, vol. 5445. Springer (2009). https:\/\/doi.org\/10.1007\/978-3-642-01907-4","DOI":"10.1007\/978-3-642-01907-4"},{"key":"635_CR66","doi-asserted-by":"publisher","unstructured":"Blomqvist, E., Hammar, K., Presutti, V.: Engineering ontologies with patterns\u2014the extreme design methodology. In: Hitzler, P., Gangemi, A., Janowicz, K., Krisnadhi, A., Presutti, V. (eds.) Ontology Engineering with Ontology Design Patterns\u2014Foundations and Applications, Studies on the Semantic Web, vol.\u00a025, pp. 23\u201350. IOS Press (2016). https:\/\/doi.org\/10.3233\/978-1-61499-676-7-23","DOI":"10.3233\/978-1-61499-676-7-23"},{"issue":"12","key":"635_CR67","doi-asserted-by":"publisher","first-page":"2724","DOI":"10.1109\/TKDE.2017.2754499","volume":"29","author":"Q Wang","year":"2017","unstructured":"Wang, Q., Mao, Z., Wang, B., Guo, L.: Knowledge graph embedding: a survey of approaches and applications. IEEE Trans. Knowl. Data Eng. 29(12), 2724\u20132743 (2017). https:\/\/doi.org\/10.1109\/TKDE.2017.2754499","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"635_CR68","unstructured":"Ronen, R., Radu, M., Feuerstein, C., Yom-Tov, E., Ahmadi, M.: Microsoft malware classification challenge. arXiv:1802.10135 (2018)"},{"key":"635_CR69","doi-asserted-by":"crossref","unstructured":"Severi, G., Leek, T., Dolan-Gavitt, B.: Malrec: Compact full-trace malware recording for retrospective deep analysis. In: International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, pp. 3\u201323. Springer (2018)","DOI":"10.1007\/978-3-319-93411-2_1"},{"key":"635_CR70","unstructured":"Catak, F.O., Yaz\u0131, A.F.: A benchmark API call dataset for Windows PE malware classification. arXiv:1905.01999 (2019)"},{"key":"635_CR71","unstructured":"Bosansky, B., Kouba, D., Manhal, O., Sick, T., Lisy, V., Kroustek, J., Somol, P.: Avast-CTU public CAPE dataset. arXiv:2209.03188 (2022)"},{"key":"635_CR72","unstructured":"Classification of malware PE headers [Online]. https:\/\/github.com\/urwithajit9\/ClaMP. Accessed 8 Oct 2022"},{"key":"635_CR73","doi-asserted-by":"crossref","unstructured":"Nataraj, L., Karthikeyan, S., Jacob, G., Manjunath, B.S.: Malware images: visualization and automatic classification. In: Proceedings of the 8th international symposium on visualization for cyber security, pp. 1\u20137 (2011)","DOI":"10.1145\/2016904.2016908"},{"key":"635_CR74","doi-asserted-by":"crossref","unstructured":"Arp, D., Spreitzenbarth, M., Hubner, M., Gascon, H., Rieck, K., Siemens, C.: DREBIN: effective and explainable detection of Android malware in your pocket. In: NDSS, vol.\u00a014, pp. 23\u201326 (2014)","DOI":"10.14722\/ndss.2014.23247"},{"key":"635_CR75","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102921","volume":"124","author":"RJ Joyce","year":"2023","unstructured":"Joyce, R.J., Amlani, D., Nicholas, C., Raff, E.: Motif: a malware reference dataset with ground truth family labels. Comput. Secur. 124, 102921 (2023)","journal-title":"Comput. Secur."},{"key":"635_CR76","unstructured":"Plohmann, D., Clauss, M., Enders, S., Padilla, E.: Malpedia: a collaborative effort to inventorize the malware landscape. In: Proceedings of the Botconf (2017)"},{"key":"635_CR77","doi-asserted-by":"publisher","first-page":"S48","DOI":"10.1016\/j.diin.2018.01.007","volume":"24","author":"EB Karbab","year":"2018","unstructured":"Karbab, E.B., Debbabi, M., Derhab, A., Mouheb, D.: Maldozer: automatic framework for android malware detection using deep learning. Digit. Investig. 24, S48\u2013S59 (2018)","journal-title":"Digit. Investig."},{"key":"635_CR78","unstructured":"VirusTotal [Online]. https:\/\/www.virustotal.com\/. Accessed 8 Oct 2022"},{"key":"635_CR79","unstructured":"VirusShare [Online]. https:\/\/virusshare.com. Accessed 15 May 2022"},{"key":"635_CR80","unstructured":"MalShare [Online]. https:\/\/malshare.com\/. Accessed 15 Oct 2022"},{"key":"635_CR81","unstructured":"MITRE Corp., MAEC\u2122 5.0 specification. Vocabularies [Online]. https:\/\/maecproject.github.io\/releases\/5.0\/MAEC_Vocabularies_Specification.pdf (2017). Accessed 15 May 2022"},{"key":"635_CR82","unstructured":"Kleymenov, A., Thabet, A.: Mastering Malware Analysis: A Malware Analyst\u2019s Practical Guide to Combating Malicious Software, APT, Cybercrime, and IoT Attacks. Packt Publishing Ltd (2022)"},{"key":"635_CR83","unstructured":"Malware initial assessment [Online]. https:\/\/www.winitor.com\/. Accessed 8 Oct 2022"},{"key":"635_CR84","doi-asserted-by":"crossref","unstructured":"Suciu, O., Coull, S.E., Johns, J.: Exploring adversarial examples in malware detection, In: 2019 IEEE Security and Privacy Workshops (SPW), pp. 8\u201314. IEEE (2019)","DOI":"10.1109\/SPW.2019.00015"},{"key":"635_CR85","unstructured":"Bridge, K., Hesham, A., Keldorph, R., Zhu, Y., Abram, N., Kennedy, J., Batchelor, D., Coulter, D., Krell, J., j04n, Robertson, C., Kayser, M., Warrington, C., Satran, M., LeBLanc, M.: PE format [Online]. https:\/\/learn.microsoft.com\/en-gb\/windows\/win32\/debug\/pe-format (2022). Accessed 15 Nov 2022"},{"key":"635_CR86","unstructured":"Motik, B., Grau, B.C., Horrocks, I., Wu, Z., Fokoue, A., Lutz, C. (eds.): OWL\u00a02 Web Ontology Language Profiles, 2nd edn. Technical report, W3C, W3C Recommendation (2012)"},{"key":"635_CR87","unstructured":"Beckett, D., Berners-Lee, T., Prud\u2019hommeaux, E., Carothers, G. (eds.) RDF 1.1 Turtle, Technical report, W3C, W3C Recommendation (2014)"},{"key":"635_CR88","doi-asserted-by":"publisher","unstructured":"Refaeilzadeh, P., Tang, L., Liu, H.: Cross-validation. In: Liu, L., \u00d6zsu, M.T. (eds.) Encyclopedia of Database Systems, pp. 532\u2013538. Springer (2009). https:\/\/doi.org\/10.1007\/978-0-387-39940-9_565","DOI":"10.1007\/978-0-387-39940-9_565"},{"issue":"1\u20132","key":"635_CR89","doi-asserted-by":"publisher","first-page":"203","DOI":"10.1007\/s10994-009-5146-2","volume":"78","author":"J Lehmann","year":"2010","unstructured":"Lehmann, J., Hitzler, P.: Concept learning in description logics using refinement operators. Mach. Learn. 78(1\u20132), 203 (2010)","journal-title":"Mach. Learn."},{"key":"635_CR90","doi-asserted-by":"publisher","unstructured":"Funk, M., Jung, J.C., Lutz, C., Pulcini, H., Wolter, F.: Learning description logic concepts: when can positive and negative examples be separated?, In: Kraus, S. (ed.) Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence, IJCAI 2019, Macao, China, August 10\u201316, 2019, pp. 1682\u20131688 (2019). https:\/\/doi.org\/10.24963\/ijcai.2019\/233","DOI":"10.24963\/ijcai.2019\/233"},{"key":"635_CR91","doi-asserted-by":"publisher","unstructured":"Lehmann, J.: Learning OWL Class Expressions. Studies on the Semantic Web, vol.\u00a06. IOS Press (2010). https:\/\/doi.org\/10.3233\/978-1-61499-340-7-i","DOI":"10.3233\/978-1-61499-340-7-i"},{"key":"635_CR92","doi-asserted-by":"crossref","unstructured":"B\u00fchmann, L., Lehmann, J., Westphal, P., Bin, S.: DL-learner structured machine learning on semantic web data. In: Companion Proceedings of the The Web Conference 2018, pp. 467\u2013471 (2018)","DOI":"10.1145\/3184558.3186235"},{"issue":"1","key":"635_CR93","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1016\/j.websem.2011.01.001","volume":"9","author":"J Lehmann","year":"2011","unstructured":"Lehmann, J., Auer, S., B\u00fchmann, L., Tramp, S.: Class expression learning for ontology engineering. J. Web Semant. 9(1), 71\u201381 (2011). https:\/\/doi.org\/10.1016\/j.websem.2011.01.001","journal-title":"J. Web Semant."},{"key":"635_CR94","doi-asserted-by":"crossref","unstructured":"Tran, A.C., Dietrich, J., Guesgen, H.W., Marsland, S.: An approach to parallel class expression learning. In: International Workshop on Rules and Rule Markup Languages for the Semantic Web, pp. 302\u2013316. Springer (2012)","DOI":"10.1007\/978-3-642-32689-9_25"},{"issue":"1","key":"635_CR95","first-page":"2145","volume":"18","author":"AC Tran","year":"2017","unstructured":"Tran, A.C., Dietrich, J., Guesgen, H.W., Marsland, S.: Parallel symmetric class expression learning. J. Mach. Learn. Res. 18(1), 2145\u20132178 (2017)","journal-title":"J. Mach. Learn. Res."},{"key":"635_CR96","doi-asserted-by":"crossref","unstructured":"Fanizzi, N., Rizzo, G., d\u2019Amato, C., Esposito, F.: DLFoil: class expression learning revisited. In: European Knowledge Acquisition Workshop, pp. 98\u2013113. Springer (2018)","DOI":"10.1007\/978-3-030-03667-6_7"},{"key":"635_CR97","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1016\/j.future.2020.02.071","volume":"108","author":"G Rizzo","year":"2020","unstructured":"Rizzo, G., Fanizzi, N., d\u2019Amato, C.: Class expression induction as concept space exploration: from DL-Foil to DL-Focl. Future Gener. Comput. Syst. 108, 256\u2013272 (2020)","journal-title":"Future Gener. Comput. Syst."},{"key":"635_CR98","doi-asserted-by":"publisher","unstructured":"Heindorf, S., Bl\u00fcbaum, L., D\u00fcsterhus, N., Werner, T., Golani, V.N., Demir, C., Ngomo, A.N.: Evolearner: learning description logics with evolutionary algorithms. In: Laforest, F., Troncy, R., Simperl, E., Agarwal, D., Gionis, A., Herman, I., M\u00e9dini, L. (eds.) WWW \u201922: The ACM Web Conference 2022, Virtual Event, Lyon, France, April 25\u201329, 2022, pp. 818\u2013828. ACM (2022). https:\/\/doi.org\/10.1145\/3485447.3511925","DOI":"10.1145\/3485447.3511925"},{"key":"635_CR99","doi-asserted-by":"publisher","unstructured":"Ten Cate, B., Funk, M., Jung, J.C., Lutz, C.: Sat-based PAC learning of description logic concepts. In: Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence, IJCAI 2023, 19th\u201325th August 2023, pp. 3347\u20133355. ijcai.org, Macao, SAR, China (2023). https:\/\/doi.org\/10.24963\/IJCAI.2023\/373","DOI":"10.24963\/IJCAI.2023\/373"},{"key":"635_CR100","doi-asserted-by":"crossref","unstructured":"Straccia, U., Mucci, M.: pFOIL-DL: learning (fuzzy) EL concept descriptions from crisp OWL data using a probabilistic ensemble estimation. In: Proceedings of the 30th Annual ACM Symposium on Applied Computing, pp. 345\u2013352 (2015)","DOI":"10.1145\/2695664.2695707"},{"key":"635_CR101","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1016\/j.fss.2021.07.002","volume":"438","author":"FA Cardillo","year":"2022","unstructured":"Cardillo, F.A., Straccia, U.: Fuzzy OWL-Boost: learning fuzzy concept inclusions via real-valued boosting. Fuzzy Sets Syst. 438, 164\u2013186 (2022). https:\/\/doi.org\/10.1016\/j.fss.2021.07.002","journal-title":"Fuzzy Sets Syst."},{"issue":"8","key":"635_CR102","doi-asserted-by":"publisher","first-page":"861","DOI":"10.1016\/j.patrec.2005.10.010","volume":"27","author":"T Fawcett","year":"2006","unstructured":"Fawcett, T.: An introduction to ROC analysis. Pattern Recogn. Lett. 27(8), 861\u2013874 (2006)","journal-title":"Pattern Recogn. Lett."},{"key":"635_CR103","doi-asserted-by":"publisher","unstructured":"Oyama, Y., Miyashita, T., Kokubo, H.: Identifying useful features for malware detection in the ember dataset. In: 2019 Seventh International Symposium on Computing and Networking Workshops (CANDARW), pp. 360\u2013366 (2019). https:\/\/doi.org\/10.1109\/CANDARW.2019.00069","DOI":"10.1109\/CANDARW.2019.00069"},{"issue":"1","key":"635_CR104","doi-asserted-by":"publisher","first-page":"43","DOI":"10.1109\/MSEC.2018.2875878","volume":"17","author":"R Carvalho","year":"2019","unstructured":"Carvalho, R., Goldsmith, M., Creese, S.: Investigating malware campaigns with semantic technologies. IEEE Secur. Priv. 17(1), 43\u201354 (2019)","journal-title":"IEEE Secur. Priv."},{"issue":"1","key":"635_CR105","doi-asserted-by":"publisher","first-page":"29","DOI":"10.3233\/AO-160163","volume":"11","author":"A Gr\u00e9gio","year":"2016","unstructured":"Gr\u00e9gio, A., Bonacin, R., de Marchi, A.C., Nabuco, O.F., de Geus, P.L.: An ontology of suspicious software behavior. Appl. Ontol. 11(1), 29\u201349 (2016)","journal-title":"Appl. Ontol."},{"key":"635_CR106","doi-asserted-by":"crossref","unstructured":"Rastogi, N., Dutta, S., Zaki, M.J., Gittens, A., Aggarwal, C.: Malont: an ontology for malware threat intelligence. In: International workshop on deployable machine learning for security defense, pp. 28\u201344. Springer (2020)","DOI":"10.1007\/978-3-030-59621-7_2"},{"key":"635_CR107","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1007\/978-3-030-90321-3_68","volume-title":"Data Science and Intelligent Systems (CoMeSySo 2021)","author":"\u0160 Balogh","year":"2021","unstructured":"Balogh, \u0160: Knowledge and datasets as a resource for improving artificial intelligence. In: Silhavy, R., Silhavy, P., Prokopova, Z. (eds.) Data Science and Intelligent Systems (CoMeSySo 2021), pp. 828\u2013837. Springer International Publishing, Cham (2021)"},{"key":"635_CR108","doi-asserted-by":"publisher","DOI":"10.1016\/J.COSE.2024.103842","volume":"141","author":"A Galli","year":"2024","unstructured":"Galli, A., La Gatta, V., Moscato, V., Postiglione, M., Sperl\u00ec, G.: Explainability in ai-based behavioral malware detection systems. Comput. Secur. 141, 103842 (2024). https:\/\/doi.org\/10.1016\/J.COSE.2024.103842","journal-title":"Comput. Secur."},{"key":"635_CR109","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.285","volume":"6","author":"FO Catak","year":"2020","unstructured":"Catak, F.O., Yaz\u0131, A.F., Elezaj, O., Ahmed, J.: Deep learning based sequential model for malware analysis using Windows exe API calls. PeerJ Comput. Sci. 6, e285 (2020)","journal-title":"PeerJ Comput. Sci."},{"key":"635_CR110","unstructured":"de\u00a0Oliveira, A.S., Sassi, R.J.: Behavioral malware detection using deep graph convolutional neural networks. Authorea Preprints (2023)"},{"key":"635_CR111","doi-asserted-by":"publisher","first-page":"25237","DOI":"10.1109\/ACCESS.2023.3255176","volume":"11","author":"H Manthena","year":"2023","unstructured":"Manthena, H., Kimmel, J.C., Abdelsalam, M., Gupta, M.: Analyzing and explaining black-box models for online malware detection. IEEE Access 11, 25237\u201325252 (2023). https:\/\/doi.org\/10.1109\/ACCESS.2023.3255176","journal-title":"IEEE Access"},{"key":"635_CR112","unstructured":"Bist\u00e1k, T., \u0160vec, P., K\u013euka, J., \u0160imko, A., Balogh, \u0160., Homola, M.: Improving DL-Learner on a malware detection use case. In: Kutz, O., Lutz, C., Ozaki, A. (eds.) Proceedings of the 36th International Workshop on Description Logics (DL 2023), Rhodes, Greece, September 2\u20134, 2023, CEUR Workshop Proceedings, vol. 3515. CEUR-WS.org (2023)"},{"key":"635_CR113","doi-asserted-by":"publisher","unstructured":"Anthony, P., Giannini, F., Diligenti, M., Homola, M., Gori, M., Balogh, \u0160., Mojzis, J.: Explainable malware detection with tailored logic explained networks, CoRR abs\/2405.03009, accepted at 6th ECML PKDD International workshop on eXplainable Knowledge Discovery in Data Mining (XKDD 2024). (2024). https:\/\/doi.org\/10.48550\/ARXIV.2405.03009(to appear)","DOI":"10.48550\/ARXIV.2405.03009"},{"key":"635_CR114","doi-asserted-by":"publisher","unstructured":"Trizna, D., Anthony, P., Homola, M., Adams, Z., Balogh, \u0160.: Learning explainable malware characterization using knowledge base embedding. In: 2024 IEEE 5th International Conference on Electro-Computing Technologies for Humanity (NIGERCON), pp. 1\u20137 (2024). https:\/\/doi.org\/10.1109\/NIGERCON62786.2024.10927262","DOI":"10.1109\/NIGERCON62786.2024.10927262"},{"key":"635_CR115","doi-asserted-by":"publisher","DOI":"10.1016\/J.ARTINT.2022.103822","volume":"314","author":"G Ciravegna","year":"2023","unstructured":"Ciravegna, G., Barbiero, P., Giannini, F., Gori, M., Li\u00f2, P., Maggini, M., Melacci, S.: Logic explained networks. Artif. Intell. 314, 103822 (2023). https:\/\/doi.org\/10.1016\/J.ARTINT.2022.103822","journal-title":"Artif. Intell."},{"issue":"1","key":"635_CR116","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1109\/TNN.2008.2005605","volume":"20","author":"F Scarselli","year":"2009","unstructured":"Scarselli, F., Gori, M., Tsoi, A.C., Hagenbuchner, M., Monfardini, G.: The graph neural network model. IEEE Trans. Neural Netw. 20(1), 61\u201380 (2009). https:\/\/doi.org\/10.1109\/TNN.2008.2005605","journal-title":"IEEE Trans. Neural Netw."},{"key":"635_CR117","unstructured":"P.O. collaborators, contributors, The orbis-security\/pe-malware-ontology repository [Online]. https:\/\/github.com\/orbis-security\/pe-malware-ontology (2022). Accessed 31 Dec 2022"},{"key":"635_CR118","unstructured":"\u0160vec, P., Balogh, \u0160., Homola, M., K\u013euka, J.: Knowledge-based dataset for training PE malware detection models. arXiv:2301.00153 (2022)"},{"key":"635_CR119","doi-asserted-by":"crossref","unstructured":"Smith, M.R., Johnson, N.T., Ingram, J.B., Carbajal, A.J., Haus, B.I., Domschot, E., Ramyaa, R., Lamb, C.C., Verzi, S.J., Kegelmeyer, W.P.: Mind the gap: on bridging the semantic gap between machine learning and malware analysis. In: Proceedings of the 13th ACM Workshop on Artificial Intelligence and Security, pp. 49\u201360 (2020)","DOI":"10.1145\/3411508.3421373"},{"key":"635_CR120","doi-asserted-by":"publisher","unstructured":"Cardillo, F.A., Debole, F., Straccia, U.: PN-OWL: a two stage algorithm to learn fuzzy concept inclusions from OWL ontologies. arXiv:2303.07192 (2023). https:\/\/doi.org\/10.48550\/ARXIV.2303.07192","DOI":"10.48550\/ARXIV.2303.07192"},{"key":"635_CR121","doi-asserted-by":"publisher","unstructured":"Moj\u017ei\u0161, J., Kenyeres, M.: Interpretable rules with a simplified data representation\u2014a case study with the ember dataset. In: Silhavy, R., Silhavy, P. (eds.) Data Analytics in System Engineering, pp. 1\u201310. Springer International Publishing (2024). https:\/\/doi.org\/10.1007\/978-3-031-53552-9_1","DOI":"10.1007\/978-3-031-53552-9_1"}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-026-00635-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11416-026-00635-y","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-026-00635-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T02:30:33Z","timestamp":1782613833000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11416-026-00635-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,28]]},"references-count":121,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["635"],"URL":"https:\/\/doi.org\/10.1007\/s11416-026-00635-y","relation":{},"ISSN":["2263-8733"],"issn-type":[{"value":"2263-8733","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,28]]},"assertion":[{"value":"7 September 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 May 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 June 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"54"}}