{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,3]],"date-time":"2025-05-03T22:03:13Z","timestamp":1746309793470,"version":"3.37.3"},"reference-count":117,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2016QY06X1205"],"award-info":[{"award-number":["2016QY06X1205"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2945787","type":"journal-article","created":{"date-parts":[[2019,10,7]],"date-time":"2019-10-07T19:55:56Z","timestamp":1570478156000},"page":"143573-143596","source":"Crossref","is-referenced-by-count":9,"title":["Review: Build a Roadmap for Stepping Into the Field of Anti-Malware Research Smoothly"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3793-8222","authenticated-orcid":false,"given":"Weijie","family":"Han","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingfeng","family":"Xue","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1572-068X","authenticated-orcid":false,"given":"Yong","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shibing","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zixiao","family":"Kong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.07.045"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.06.004"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.05.020"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.28"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2015.05.008"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3003816"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CBD.2018.00071"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2018.5186"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.02.007"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.10.022"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.03.007"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.jvlc.2012.02.002"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2016.09.004"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.04.003"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.008"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.007"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.07.004"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2089125.2089126"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2017.10.036"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1155\/2017\/3273891"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1186\/s13673-018-0125-x"},{"key":"ref25","doi-asserted-by":"crossref","first-page":"283","DOI":"10.3844\/ajassp.2012.283.288","article-title":"Malware detection based on hybrid signature behaviour application programming interface call graph","volume":"9","author":"elhadi","year":"2012","journal-title":"Amer J Appl Sci"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076790"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2018.03.006"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2013.116"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2847671"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1155\/2016\/4601847"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-015-1594-6"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/1774088.1774505"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.04.024"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866353"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-009-0137-1"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2016.2559378"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2014.10.031"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.10.011"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1002\/sam.11346"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.01.001"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74320-0_10"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813642"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1155\/2014\/260905"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-016-0330-4"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2018.06.012"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-005-0002-9"},{"key":"ref48","first-page":"287","article-title":"BareCloud: Bare-metal analysis-based evasive malware detection","author":"kirat","year":"2014","journal-title":"Proc 23rd USENIX Secur Symp"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1155\/2015\/659101"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2014.06.001"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2934515"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1698750.1698752"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.10.004"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-018-09679-z"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.02.006"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.48"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2469253"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1049\/iet-sen.2013.0020"},{"journal-title":"Panda Security Info Glossary","year":"2019","key":"ref77"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2016.09.004"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.98"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3234150"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-017-1045-6"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.1896"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.mcm.2013.03.008"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2931394"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.02.009"},{"key":"ref64","first-page":"253","article-title":"BinSim: Trace-based semantic binary diffing via system call sliced segment equivalence checking","author":"ming","year":"2017","journal-title":"Proc 26th USENIX Secur Symp"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.04.001"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01393-5_12"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1255"},{"key":"ref2","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1016\/j.future.2017.06.002","article-title":"Automated multi-level malware detection system based on reconstructed semantic view of executables using machine learning techniques at VMM","volume":"79","author":"kumara","year":"2018","journal-title":"Future Gener Comput Syst"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046689"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857713"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1145\/2151024.2151053"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2009.03.003"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.12.005"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1145\/2379690.2379695"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2930286"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.08.020"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.11.001"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2010.0180"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2009.5137328"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2016.12.016"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623342"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(14)70531-7"},{"key":"ref103","doi-asserted-by":"crossref","first-page":"1044","DOI":"10.3390\/app8071044","article-title":"HM3alD: Polymorphic Malware detection using program behavior-aware hidden Markov model","volume":"8","author":"tajoddin","year":"2018","journal-title":"Appl Sci"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.37"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-009-0086-7"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0082-4"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/3073559"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2013.05.006"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-013-0290-1"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04342-0_7"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.09.016"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2016.12.008"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.11.016"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/IKT.2013.6620049"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2749538"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2012.65"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.40"},{"key":"ref16","first-page":"312","article-title":"A scalable approach for malware detection through bounded feature space behavior modeling","author":"chandramohan","year":"2014","journal-title":"Proc 28th IEEE\/ACM Int Conf Automated Softw Eng (ASE)"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.08.022"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2838569"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2822680"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/s13369-016-2264-6"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2491300"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2291964"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455779"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2018.1700415"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.07.052"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2012.0289"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140446"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-010-4123-5"},{"journal-title":"SafetyDetective","year":"2019","key":"ref89"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517313"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2512518"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15512-3_17"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2636078"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08861047.pdf?arnumber=8861047","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,8,10]],"date-time":"2021-08-10T19:40:27Z","timestamp":1628624427000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8861047\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":117,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2945787","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2019]]}}}